Order Risk Guard

Add-on ID: kv_order_risk_guard · Edition: CS-Cart & Multi-Vendor · Latest version: 1.0.0 · Compatible with: CS-Cart & Multi-Vendor 4.17.2 – 4.21.x, PHP 7.4 – 8.3 · Changelog: view

Order Risk Guard gives every new order a risk score from 0 to 100 and acts on it automatically. Fake and refused cash-on-delivery orders cost you shipping twice; chargeback fraudsters come back with a new e-mail address. Order Risk Guard keeps a block list and an allow list of e-mail addresses, e-mail domains, phone numbers, IP addresses and ranges, delivery addresses and customer accounts, looks at the customer’s earlier refused or returned orders, and asks cash-on-delivery buyers to confirm their order before you ship it.

The CS-Cart “Anti fraud” add-on only sends orders to a paid MaxMind account. Order Risk Guard works on its own data, needs no external service and can run next to it.

• Risk score per order from signals you can weigh: block-list entries, earlier refused or returned orders (you choose which order statuses count), many orders from the same e-mail, phone or IP address in a short time, billing and shipping countries that differ, an IP address in another country than the delivery address (with the GeoLite2 country database that comes with CS-Cart), disposable e-mail addresses, a high order total and a first order with a high total. Customers with paid orders and no problems get points removed.
• Block list and allow list with an action per entry: refuse the checkout, require prepayment, hold the order for review, or add points. Phone numbers match in any format, IP ranges in CIDR notation, addresses regardless of spelling. Entries can expire. CSV import and export.
• Require prepayment: risky customers do not see cash on delivery (or the methods you choose) at checkout; a short, neutral note explains it. A forged request is refused too.
• Hold for review: risky orders with an offline payment get the “Risk review” status until you approve or cancel them with one click. Online payments are never interrupted, only flagged.
• Cash-on-delivery confirmation: the buyer gets an e-mail with a confirmation link and a 6-digit code; the order waits in “Awaiting confirmation” and is cancelled automatically if nobody confirms it in time (48 hours by default). Buyers can also cancel an order they did not place.
• Risk panel on the order page with the score, every reason with its points, the confirmation state, the customer’s order history (orders, paid, refused or returned) and one-click actions: approve, cancel, resend the confirmation, add the e-mail, phone, IP, address or account to the block list.
• Risk column and filter in the order list: low, medium, high, held, awaiting confirmation, not scored.
• Multi-Vendor: the marketplace administrator manages the lists and rules; vendors see the risk score and reasons of their own orders, never the personal data on the lists.
• Full page cache safe (4.21): everything runs at checkout and order placement, never in cached storefront pages.

Documentation

Page	Contents
Installation	Requirements, installing, order statuses, privileges, cron, upgrading, uninstalling
Configuration	Thresholds, payment methods, statuses, signals, confirmation, license
Usage	Lists, import/export, the order panel, holds, confirmations, the order list, vendors
Developer notes	Scoring, data model, hooks, SMS extension point, file map
FAQ	Common questions, other add-ons, license

Compatibility

CS-Cart / Multi-Vendor	4.17.2 – 4.21.x
PHP	7.2.5 – 8.3 (whatever your CS-Cart version supports)
Themes	Responsive, Nova (4.21), Bright and themes based on them
Checkout	Standard one-page checkout; guest and registered customers
Anti fraud (core add-on)	Can run at the same time; its decision is kept
Full page cache (4.21)	Supported
Ultimate	Lists and settings are shared by all storefronts

License

Scoring and the automatic actions need a valid license. See License for what happens without one.