Shopify Checkout Blocker — Block Orders by Email, Phone, Address

Storefront blocking happens before a visitor reaches checkout. Checkout blocking happens at payment — letting them browse but stopping the order from completing. Each has a place; this guide covers when to use checkout-level rules and how.

When to use checkout vs storefront blocking

Checkout-level rules are server-side via Shopify Functions — impossible to bypass from the browser.

How to set up checkout blocking

Checkout rules require the Enterprise plan ($8.99/mo).

1. Install Shieldy.
2. Open Block checkout.
3. Choose the rule type:

• Email
• Phone
• Customer name
• Address / ZIP code
• Subtotal

1. Enter the pattern.
2. Set custom error message.
3. Save.

Block by email pattern

Most common patterns:

*@tempmail.com
*@guerrillamail.com
*@10minutemail.com
*@mailinator.com
*@yopmail.com
*@trashmail.com
*@throwaway.email
*@sharklasers.com

These are disposable inbox services often used by fraudsters and abuse-account creators.

You can also block specific addresses ([email protected]) or partial patterns (*@suspicious-domain.com).

Block by phone prefix

If your fraud-order data shows phone prefixes from known abuse regions:

+1234        (entire prefix)
+1234567890  (exact number)
000-000-     (formatted prefix)

Phone prefixes are imperfect (real customers also have them) — use sparingly and only based on data.

Block by customer name

Useful for blocking specific known-bad actors:

John Doe          (exact)
Doe               (last name match)

Effective for chargeback abusers using same-name multiple-card patterns.

Block by address keywords

PO Box           (block all PO boxes if you require physical addresses)
Freight Forwarder (block freight-forwarder addresses common in fraud)
Suite #          (specific suite patterns)

Freight forwarders are a strong chargeback indicator — fraudsters use them to receive merchandise outside their actual country.

Block by ZIP code

12345         (exact ZIP)
123*          (prefix)

Use for ZIPs you do not ship to or known high-fraud postal areas.

Block by subtotal

Card-testers hit checkout with $0.01-$5 amounts to validate stolen cards. Block these:

1. Block checkout → Subtotal rule.
2. Condition: < $5.
3. Save.

You can also block high-value orders that match unusual patterns:

> $1000 with mismatched billing/shipping country
> $500 from first-time customer

Block by billing/shipping mismatch

In Block checkout → Address mismatch rule:

• Block if billing country ≠ shipping country
• Block if billing state ≠ shipping state (for US)
• Block if shipping address is a known freight forwarder

Address mismatch is a top-3 chargeback predictor.

Custom error messages

Each rule supports a custom error shown inside Shopify's native checkout:

• "Sorry, this email address is not eligible for orders."
• "We cannot ship to PO boxes or freight forwarders."
• "This order amount requires additional verification."

Keep messages neutral — never reveal the rule that fired (fraudsters use that info to evade).

How it integrates with Shopify

Shieldy uses Shopify Functions, the official server-side extensibility API for checkout. This means:

• Rules run on Shopify's infrastructure, not your storefront
• Cannot be bypassed via browser developer tools
• Compatible with all themes (no theme code needed)
• Works with checkout extensibility extensions
• No impact on page speed (<200ms response)

Whitelist exceptions

To avoid false positives, add exceptions:

• Specific customer IDs (VIPs, repeat buyers)
• Specific shipping addresses (B2B accounts)
• Tagged customer segments

Combine with auto-cancel

Layered approach:

1. Storefront block — bots, VPN, country
2. Checkout block — email, phone, address patterns
3. Auto-cancel — post-purchase for orders that pass both

Each layer catches different fraud types.

What about Shopify Markets?

Markets controls pricing/currency/language per region but does not block. Checkout blocking via Shieldy works on top of Markets — rules apply regardless of which market the buyer is in.

Real-world example

A Shopify Plus merchant we worked with had 12 chargebacks/month before checkout blocking. Their top patterns:

• 40 % had disposable email domains
• 30 % used freight-forwarder addresses
• 20 % had billing/shipping country mismatch
• 10 % were card-tests with subtotal <$5

After enabling all four checkout rules:

• Chargebacks dropped from 12/mo to 2/mo (83 % reduction)
• False-positive complaints: 3 over the first 30 days (resolved via whitelist)
• Net revenue impact: +$8,400/mo (chargeback fees + lost merchandise saved)

Frequently asked questions

Will checkout blocking break my checkout flow?

No. Rules trigger only when matched. Normal customers see the standard checkout.

Can buyers retry with different info?

Yes — if they change their email or address, the rule no longer matches. For repeat abusers, layer in IP blocking too.

Does it work with Shop Pay and Apple Pay?

Yes. Server-side rules run before payment authorization regardless of method.

Can I A/B test rule strictness?

Shieldy supports rule toggling without delete — turn on for a week, measure, adjust.

How fast does checkout blocking respond?

<200ms — invisible to the buyer.

Wrapping up

Checkout blocking is the most surgical fraud control available to Shopify merchants. Combined with storefront blocking and auto-cancel, it forms a complete pipeline. Worth setting up before chargebacks become a real problem.

Install Shieldy free → · See pricing →