Reviewed by the SEOPointz team · Last reviewed June 2026. We checked each fraud tool’s pricing and guarantee terms against its own documentation before recommending it. SEOPointz may earn a commission from some links; it never changes what we recommend.
Fraud is no longer a tax that only large retailers pay. Industry estimates put merchant losses to online payment fraud in the tens of billions of dollars a year, and the part that stings most is the multiplier: for every dollar of fraud, retailers tend to lose several more once you count the lost goods, the shipping, the chargeback fee, and the staff time. Worse, the single largest category of disputes is not a stranger with a stolen card — it is “friendly fraud,” where a real customer disputes a legitimate charge. Defending your store means understanding which threats you actually face before you spend on tools to stop them.
Know your enemy: the four attacks that hit small stores
Generic “fraud protection” advice fails because the threats are different animals:
- Card testing. Bots fire thousands of stolen card numbers through your checkout in tiny transactions to find which ones still work. Even when the charges are small, the processor fees and the eventual chargebacks add up fast, and a wave of declines can get your merchant account flagged.
- Stolen-card (card-not-present) fraud. A genuine but stolen card buys real goods that ship to a drop address. This is the classic chargeback that ends with you out both the product and the money.
- Friendly fraud. The customer received the order, then claims they did not — “I never got it” or “I didn’t authorize this.” A large share of disputes fall here, and they are maddening because the order looked perfectly legitimate.
- Account takeover. An attacker logs into a real customer’s account, changes the shipping address, and cashes in saved cards and loyalty points.
The free defences to set up first
Before paying for any fraud platform, close the cheap gaps. Turn on AVS (address verification) and CVV checks in your payment gateway and decline mismatches on high-risk orders. Add a CAPTCHA or invisible bot challenge on checkout and account creation — this alone blocks most automated card testing. Enable 3-D Secure (Visa Secure, Mastercard Identity Check) so liability for many fraudulent transactions shifts to the card issuer. Rate-limit checkout attempts per IP and per card. And require strong passwords plus optional two-factor authentication on customer accounts to blunt takeovers. These cost nothing beyond setup time and stop a surprising amount of low-effort fraud.
When to add a dedicated fraud tool
Once order volume rises, manual review stops scaling and you bleed time reviewing good orders. That is the point to add automated screening. The real differentiator between platforms is the chargeback guarantee: some vendors will reimburse you for fraud on any order they approved, effectively taking the liability off your books. That guarantee is what you are paying for — not just a risk score.
| Tool | Pricing model | Chargeback guarantee | Best for |
|---|---|---|---|
| Stripe Radar | Built into Stripe; advanced rules tier costs extra, with optional chargeback protection around 0.4% per order | Only via the paid protection add-on | Stores already on Stripe wanting screening without a new vendor |
| NoFraud | Per-order pricing; fights chargebacks on your behalf | Optional 100% guarantee on approved orders | Mid-market stores wanting clear pass/fail decisions and dispute help |
| Signifyd | Around 1% per order | 100% financial guarantee on approved orders | Scaling stores wanting full automation and liability transfer |
Be clear-eyed about the trade-offs. A roughly 1% per-order fee is real margin, so a guarantee only pays for itself if your fraud and chargeback losses exceed it — many low-risk stores do not need it. Stripe Radar is convenient if you already use Stripe, but its base tier is a scoring engine, not a guarantee; you carry the loss unless you buy the protection layer. And no tool eliminates friendly fraud, because the order genuinely was placed — that battle is won with delivery proof and good records, not a risk score.
Fighting friendly fraud and winning disputes
Since friendly fraud is the biggest single slice of disputes, build the habits that let you win representments. Keep delivery confirmation and tracking on every order. Use clear, recognisable billing descriptors so customers do not dispute a charge simply because they did not recognise the name on their statement. Send order and shipping confirmation emails — they double as evidence. For high-value or subscription orders, require a logged-in account and keep an audit trail. When a dispute lands, respond inside the deadline with the full paper trail; banks side with merchants far more often when the evidence is organised.
Balancing security against false declines
The hidden cost of fraud prevention is the legitimate order you wrongly reject. Over-aggressive rules turn away good customers, and those false declines can cost more than the fraud you prevented. Tune your thresholds, watch your decline rate, and treat a sudden spike in declined good orders as a problem to fix — not a sign the system is working harder.
Frequently asked questions
Does a chargeback guarantee cover friendly fraud?
Usually only partially. Most guarantees cover fraud on orders the tool approved; disputes where the real cardholder claims non-receipt or dissatisfaction often fall outside the guarantee, which is why delivery evidence still matters.
Is 3-D Secure worth the extra checkout friction?
For higher-risk or higher-value orders, generally yes — it shifts fraud liability to the card issuer. Many stores apply it selectively rather than to every transaction to avoid abandoned carts.
Can a small store skip paid fraud tools entirely?
Often, yes. AVS, CVV, CAPTCHA, 3-D Secure, and rate limiting stop most low-effort attacks at no cost. Add a paid platform once your fraud losses clearly exceed its per-order fee.
Fraud prevention is one layer of a wider defence. Pair it with the fundamentals in our guide to ecommerce security and our breakdown of choosing the right payment gateway, since the gateway you pick determines which of these protections you can switch on.
