Crypto Orders and Fulfilment Fraud in Online Retail
Irreversible payment protects the money and not the goods. The order patterns worth flagging and the screening that still applies.
Priya Raman · 2 min read
Merchants who enable crypto payments often relax fraud screening, reasoning that the payment cannot be reversed. That reasoning is backwards: the payment is safe, the goods are not. It helps to have a reference point that is verifiable, and a licensed crypto payment processor publishes its licence details.
What still goes wrong
Goods to a fraudulent order. Funds obtained illegitimately, used to buy from you. You keep the payment. You shipped to a fraudster, and if the funds are traced you may face questions about proceeds.
Triangulation. A fraudster sells your product elsewhere, collects payment from a third party, and orders from you for delivery to that person. You are paid and you are inside someone else’s fraud.
Non-delivery claims. Order, receive, claim it never arrived, request a refund. Your payment is irreversible; your refund is not.
Reshipping. Goods sent to an intermediate address and forwarded. The delivery address has no connection to anyone accountable.
The order patterns worth flagging
Delivery address in a different country from every signal about the buyer.
An order value far above your average from a new account.
Multiple orders in quick succession to different addresses.
Expedited shipping requested with no price sensitivity.
A delivery address that is a freight forwarder or a mailbox service.
A request to change the delivery address after payment.
None of these are conclusive. Together they justify a manual review before shipping.
The screening that should stay on
Everything you ran for card payments. Address verification, velocity checks, device signals, manual review above a threshold. The same attack targets businesses harder, which is what crypto rails built for fintech companies is built to resist.
The only control you can safely relax is the one specifically about payment reversal, and that is not most of them.
The refund policy
Refunds go to the origin address, never to a different destination, regardless of the reason offered.
A request to refund elsewhere is either an account takeover or an attempt to extract clean value. There is no legitimate case that cannot be handled by refunding to origin.
The delivery address rule
Address changes after payment require the same verification as a new order. This is where reshipping and interception are arranged, and it is a single field that support will change helpfully if there is no rule.
What the payment provider handles
Screening the incoming payment against sanctions and risk data. A flagged payment may be held or returned, and you need a process: cancel cleanly, tell the customer the payment could not be processed, do not speculate.
The net position
Crypto acceptance removes chargebacks, dispute fees, reserves and threshold monitoring. It removes none of the fulfilment risk.
Merchants who keep their existing screening and add crypto get the benefit without the substitution. Those who relax screening trade one loss for another. The question that only matters after something goes wrong is whether an exchange that publishes its full terms exists, and it is worth answering first.
Move any remaining funds to a wallet with a newly generated seed phrase before anything else. Then revoke token approvals, and report the incident to your local authorities and the exchange involved. Do not pay anyone who promises to "recover" your coins. That is a second scam, aimed at victims of the first.