Order Risk Guard: fraud score, blocklist & COD confirmation

What it does

Refused cash-on-delivery parcels cost shipping twice, and fraudsters come back with a new e-mail address. CS-Cart has no block list and its Anti fraud add-on needs a paid MaxMind account. Order Risk Guard scores every order with your own data: block-list matches, earlier refused or returned orders, many orders in a short time, country mismatches, disposable e-mails and high first orders. It is for stores and marketplaces that offer cash on delivery or ship valuable goods.

How it works

Set three thresholds

Require prepayment, hold for review and refuse checkout. At checkout, risky customers see no cash on delivery. A placed order gets its score: high-risk offline orders wait in Risk review; COD orders get a confirmation e-mail with a link and a 6-digit code and are cancelled if nobody confirms. The order page shows every reason with its points and buttons to approve, cancel or block. Lists import and export as CSV.

Features

Risk score from 0 to 100 for every order, with weights you set
Block list and allow list: e-mail, domain, phone, IP or range, address, customer
Actions per entry: refuse checkout, require prepayment, hold, add points
Signals: refused or returned orders, order velocity, country mismatch, IP country, disposable e-mails, high and first orders
Cash on delivery hidden for risky customers with a neutral note
Hold for review with one-click approve or cancel
COD confirmation by signed link or 6-digit code, with automatic cancellation
Risk panel and order history on the order page, risk column and filter in the order list
CSV import and export of the lists
Multi-Vendor: vendors see the risk of their own orders, never the list data

What you get

Package	kv_order_risk_guard-1.0.0.zip, installed through Add-ons → Manage add-ons
Updates & support	12 months included. Download new versions from your account and install them in Add-ons → Manage add-ons or the Upgrade Center.
License	1 production installation. Staging, dev and localhost are free and unlimited. The add-on keeps working after the update period ends. How licensing works

Compatibility

We list only the builds we install and test on. “Tested” means the full test plan was run on that build; “Supported” means the build is inside the supported range and uses the same hooks.

CS-Cart version and edition compatibility
CS-Cart version	CS-Cart	CS-Cart Ultimate	Multi-Vendor	Multi-Vendor Ultimate
4.22 and later	Testing next	Testing next	Testing next	Testing next
4.21.2	Supported	Supported	Tested	Supported
4.20.x	Supported	Supported	Supported	Supported
4.19.x	Supported	Supported	Supported	Supported
4.18.x	Supported	Supported	Supported	Supported
4.17.2	Tested	Supported	Tested	Supported
Before 4.17.2	Not supported	Not supported	Not supported	Not supported

Last tested build: Multi-Vendor 4.21.2, Oct 25, 2026Tested on: Multi-Vendor 4.17.2, CS-Cart 4.17.2, Multi-Vendor 4.21.2

Requirements

PHP	CS-Cart or CS-Cart Multi-Vendor 4.17.2 – 4.21.x (tested on CS-Cart Ultimate 4.17.2 with PHP 8.1, Multi-Vendor 4.17.2 with PHP 8.1 and Multi-Vendor 4.21.2 with PHP 8.3)
PHP	PHP 7.2.5 – 8.3, as supported by your CS-Cart version
Requirement	MySQL/MariaDB with InnoDB
Platform	Outgoing e-mail working in CS-Cart (the cash-on-delivery confirmation is sent as a normal store e-mail)
Core changes	None. Hooks and template overrides only

1.0.0

Oct 25, 2026

Latest

Added 9

Risk score (0-100) for every storefront order with weighted signals: block-list entries, earlier refused or returned orders (statuses chosen by the administrator, matched by account, e-mail and phone), order velocity by e-mail, phone or IP, billing/shipping country mismatch, IP country (bundled GeoLite2 database), disposable e-mail domains (built-in list plus own domains), high order value and first order with a high value, trusted customers.
Block list and allow list: e-mail, e-mail domain, phone (last 10 digits), IP address or CIDR range (IPv4/IPv6), address fingerprint and customer account; actions refuse checkout, require prepayment, hold for review and add points; expiry dates, hit counters, search, bulk delete, CSV import (file or paste) and export.
Checkout: cash-on-delivery methods hidden for risky customers with a neutral note; refused checkouts with a neutral message; server-side refusal of forged requests; log of the last 500 refused checkouts.
Order placement: "Risk review" status for risky orders with offline payments (online payments are only flagged), "Awaiting confirmation" status for cash-on-delivery orders, risk summary in the staff notes.
Cash-on-delivery confirmation: e-mail with a signed link and a 6-digit code, confirmation page with confirm and cancel buttons, code box on the order-placed and order pages, five code attempts, up to three e-mails, automatic cancellation after the configured hours (admin pseudo-cron, console cron and cron URL), extension hook for SMS and messaging channels.
Admin: risk panel on the order page (score, level, reasons with points, confirmation state, customer history, approve, cancel, mark as confirmed, resend, score again, add identifiers to the block list), risk column and risk filter in the order list.
Multi-Vendor: one confirmation per checkout for all vendor orders; vendors see the risk of their own orders without personal list data and without actions.
Coexistence with the core Anti fraud add-on; full page cache safe; GDPR export and anonymisation of the risk records.
Domain-bound license check and self-healing upgrades.

Tested on Multi-Vendor 4.17.2, CS-Cart 4.17.2, Multi-Vendor 4.21.2. First release.

Does the add-on need an external fraud service?

No. Everything runs in your store with your own data. The IP country comes from the GeoLite2 database that ships with CS-Cart. No customer data leaves your store.

Can it run together with the CS-Cart "Anti fraud" (MaxMind) add-on?

Yes. When Anti fraud already holds an order, Order Risk Guard keeps that decision and only records its own score.

Will a risky customer know why cash on delivery is missing?

No. They see a short, neutral note that cash on delivery is not available for this order, and the other payment methods. A refused checkout shows "We could not complete your order. Please contact us for help."

Are orders paid by card ever held?

No. Holds apply only to orders with an offline payment method (cash on delivery, bank transfer, cheque...). Risky prepaid orders are flagged in the order list and the staff notes so you can check them before shipping.

Which statuses count as "refused" or "returned"?

The ones you tick in Statuses of refused or returned orders (Declined and Canceled by default). Most cash-on-delivery stores create statuses such as "Refused on delivery" and "Returned to sender" and tick them; from then on every refused parcel raises the score of that customer's next order.

How are customers recognised when they use a new e-mail address?

Earlier orders are found by account, e-mail and any phone number of the order. Block-list entries also match the phone, the IP address or range and the delivery address, so a new e-mail address alone does not help.

What if a confirmation e-mail lands in spam?

The buyer can ask for a new e-mail from the order page (up to three), you can send it again from the order page, or you can confirm the order yourself after a phone call (Mark as confirmed).

Can the code be sent by SMS?

The add-on sends e-mail. Developers can send the same code by SMS or WhatsApp through the kv_order_risk_guard_send_code hook (see Developer notes).

Do vendors see the block list?

No. On Multi-Vendor only the administrator manages the lists. Vendors see the score and the reasons for their own orders, without e-mail addresses, phones, IP addresses or addresses from the lists.

Does it work with the full page cache of CS-Cart 4.21?

Yes. All checks run at checkout and order placement; cached pages never contain risk data.

What happens if the license lapses?

Without a valid license (no key after the 14-day start period, an invalid or revoked key, a domain the license does not cover, or no successful check for 14 days), new orders are not scored, no payment method is hidden and no order is held or blocked; confirmation links already sent keep working, orders already held stay as they are for your review, and the block list, allow list and risk history stay saved. Once the license is valid again, everything works again.

The admin panel shows a license notice.

Open Add-ons → Manage add-ons → Order Risk Guard → Settings → License. The status line says what is wrong: no key, a key for another add-on, a revoked license, or a domain that the license does not cover. Fix it and click Check now. See License.

Does the add-on work on my staging copy?

Yes. Subdomains of your licensed domain (for example staging.yourstore.com) and local development hosts (localhost, private IP addresses, .local, .test) are covered by the same license.

Does the license check slow down my storefront or checkout?

No. The check runs in the admin panel or from cron, once a day. The storefront never runs it.

InstallationRequirements, Install, Cron job (optional), Privileges, Upgrading, Disabling and uninstalling ConfigurationGeneral, Risk signals, COD confirmation, License UsageHow an order is checked, Block list and allow list, The risk panel on the order page, Cash-on-delivery confirmation, The order list, Multi-Vendor Developer notesFlow, Scoring, Hooks for developers, Data model, Controllers, Full page cache and performance FAQ14 answers to common questions.

Browse by category

Goals

Best seller

Order Risk Guard

What it does

How it works

Set three thresholds

Features

What you get

Compatibility

Requirements

Added 9

Details

Support

Frequently bought together

Also from Kavio Labs

Product Videos Gallery

Shipping Goal Progress Bar

Vendor Vacation Mode

See the roadmap