Fraud protection settings

Fake or repeated cash-on-delivery orders cost you delivery fees. In Codform, go to Fraud protection.

Phone number check

The order form checks the phone number before the order is sent:

• A number typed with a country code, for example +964 770 123 4567, is checked against that country's mobile format, whatever your store's country.
• A number without a country code is checked against the Default country in Settings › Delivery, or the shopper's country if you haven't set one.
• If your customers use numbers the check refuses, such as landlines, turn on Accept any phone number in Settings › Delivery. The form then only checks that the number has 7 to 15 digits, and adds your delivery country's code to numbers typed without one.

A shopper whose number is refused sees "Enter a valid phone number, e.g. 05X XXX XXXX or +964…" and can correct it.

Order limit

Orders per phone number per hour limits how many orders one phone number can place through the form in an hour. Enter a number from 1 to 20 (the default is 3), or 0 to turn the limit off. A shopper over the limit sees a message asking them to try again later.

Blocked phone numbers

Add a number with its country code, for example +212612345678. If you've set a default country in Settings › Delivery, you can leave the country code out. Orders from a blocked number are refused, and the shopper sees a message asking them to contact the store.

Blocked IP addresses

Add an IP address, for example 203.0.113.7, to refuse orders from it. You can find a customer's IP address on the order in your Shopify admin.

What you'll see

• Refused attempts appear on the Orders page with the status Blocked and the reason: Blocklist, Too many orders from this phone, or Free plan limit reached.
• In the lists, only part of each number or address is shown, for example +212 ••• 678. The app keeps a secure fingerprint of it, not the full value.
• You can block up to 1,000 entries, and remove any of them at any time.