Skip to content
Cartsaver

Shopify fake Cash on Delivery orders: how to stop them

The only reliable way to stop fake Cash on Delivery orders on Shopify is to require every COD buyer to confirm a one-tap message on WhatsApp before the order ships. Cartsaver does this automatically — verified orders auto-fulfil, unverified orders either get flagged as high risk or cancel themselves after the wait window you set, so no fake order ever reaches your courier.

Why does Shopify have a fake COD orders problem?

Section titled “Why does Shopify have a fake COD orders problem?”

Cash on Delivery is the dominant payment method across most MENA markets, but it’s also frictionless to abuse: a fake order costs the buyer nothing because they never pay. Bots, competitors, and unhappy customers can flood a COD-heavy store with fake orders that look real on the Shopify dashboard but vanish at the doorstep. Without verification, the store eats the shipping cost and the return-to-origin (RTO) loop.

What does “verified” actually mean?

Section titled “What does “verified” actually mean?”

When a customer places a COD order, Cartsaver sends a tap-to-confirm WhatsApp message to the phone number on the order. If the customer taps Confirm, the order is verified — Cartsaver moves it into Shopify’s verified state and, if you’ve enabled auto-fulfilment, it goes straight to the courier without a human touching it. See the WhatsApp Order Confirmation feature for the full lifecycle.

What happens to unverified orders?

Section titled “What happens to unverified orders?”

That’s your call. The Pending Order Action supports two paths: Mark as High Risk (the order sits in Shopify’s high-risk queue for manual review) or Auto Cancel (the order cancels itself after the wait window, freeing inventory). Most stores running aggressive RTO-reduction set Auto Cancel with a 6–24 hour wait window. Cautious stores stick with High Risk and review by hand.

Does this slow down real buyers?

Section titled “Does this slow down real buyers?”

No, because the customer doesn’t do anything different at checkout. They place the order through Shopify’s native checkout exactly as they always have. The verification message lands on their WhatsApp seconds later — they tap once to confirm, and the order proceeds. Real buyers spend maybe two seconds on confirmation; fake buyers don’t confirm because the phone number isn’t theirs or they have no intention of paying.

How fast can fake orders be cancelled?

Section titled “How fast can fake orders be cancelled?”

The wait window before Pending Order Action is configurable from 30 minutes up to 24 hours after the first confirmation message is sent. Most stores find 6–12 hours is the sweet spot — short enough that fake orders don’t accumulate, long enough that legitimate customers who were AFK for a few hours still verify in time.

Does Cartsaver block known bad numbers entirely?

Section titled “Does Cartsaver block known bad numbers entirely?”

Yes. The Blocklists feature lets you block specific phone numbers and email addresses (or email domains) entirely — orders from blocklisted contacts never make it to the verification step.

What about abandoned legit carts — does this app recover them?

Section titled “What about abandoned legit carts — does this app recover them?”

Yes. Abandoned Cart Recovery sends a sequence of WhatsApp reminders to customers who didn’t complete checkout, recovering a meaningful percentage of carts that would otherwise be lost. It’s a separate flow from COD verification but ships in the same app.

Section titled “Related reading”

Last reviewed: 2026-05-21.