Why is a sale flagged as possible fraud?
The Possible fraud badge shows on a sale when it looks like card testing: someone using your checkout to find out which stolen cards still work. Hover over the badge to see which signal matched.
Where: Sales → My Sales. Any role with access to the Sales area sees the badge — see Roles and permissions.
The signals
Email and document only count together: many people use an email without their name, and the document may simply not have been provided.
What is not flagged
The two card signals apply only to declined cards at checkout. These are left out:
- Declines from a buyer who bought right after. If the same buyer paid for the same offer within 30 minutes — with another card or with Pix — their declines are not flagged.
- Declines during a launch opening. When many people buy at the same time, ordinary bank declines (insufficient funds, wrong security code, "contact your card issuer") pile up, but approvals keep pace. As long as approved sales keep coming in, the run of declines does not become an alert.
- Retrying with the same card. What counts is the number of different cards, not the number of attempts.
- Trying several cards in their own name. A card whose holder has the buyer's name does not count towards the buyer signal.
- Unpaid Pix and boleto and declined subscription charges.
Good to know
- The badge is only a warning. Nothing is blocked or changed on the sale.
- To see only flagged sales, turn on Possible fraud only in the My Sales filters.
- Flagged sales are left out of Sales recovery, so you don't spend effort trying to recover someone who was testing cards.
- The badge is recalculated on every read. If the buyer pays later, the warning disappears from their declines.