An order comes in with a billing address in one place and a shipping address in another. Sometimes that is fraud, and often it is a gift. This guide covers when a mismatch matters, how to check it, and whether to force the two addresses to match.
A mismatch alone is not fraud
Shopify's fraud prevention guidance says bad actors can provide a shipping address that does not match the billing address. The same guidance points out that legitimate shoppers sending a gift or buying on behalf of someone else might also have different addresses. The mismatch is a prompt to look, not an answer.
- Common honest reasons: Gifts, shipping to a workplace, buying for a relative
- Common fraud reason: A stolen card billed to the victim, with goods sent elsewhere
What makes a mismatch worrying
Distance and pattern matter more than the mismatch itself. Shopify suggests mapping both addresses, and treats a significant distance, such as different continents, as a sign the order may be fraudulent.
| Lower concern | Higher concern |
|---|---|
| Both addresses in the same city or region | Addresses on different continents |
| One order, one customer | Several orders with different billing names going to one shipping address |
| Customer confirms the details when asked | Customer does not reply, or the phone number is invalid |
| Other fraud indicators look clean | Other indicators on the order also look wrong |
How to check the order
A few quick checks usually settle it. Shopify's guidance says calling the customer is always a good idea, and suggests asking simple questions to see whether they know the details they used.
- ✅ Map the billing and shipping addresses and compare the distance
- ✅ Compare the order's IP location with where the customer claims to be
- ✅ Call or email the customer to confirm the order
- ✅ Read the other fraud indicators on the order, including AVS and CVV
- ❌ Do not ship while the fraud analysis is still pending
Should you force addresses to match
Shopify has a checkout setting called "Require shipping and billing address to match", under Settings, Checkout, in the address collection preferences. Shopify recommends that most merchants allow the two addresses to differ. It says requiring a match is only recommended for stores with a high amount of fraudulent orders.
- Cost: Shopify states this will prevent customers from sending gifts
- Fit: Stores with a serious fraud problem
- Poor fit: Stores that sell giftable products
When you decide to ship or cancel
If the customer confirms and the other signals are clean, ship with tracking and keep the confirmation. If you cannot verify the order, canceling before fulfillment is the safer route. Read more on reviewing risky orders and order risk levels.
- Ship: Verified customer, short distance, clean indicators
- Verify: Mismatch plus one other odd signal
- Cancel: No reply, large distance and other warning signs together
Doing this at scale
RiskClarity reviews each paid order and explains the risk in plain English, with the fraud signals behind it, then recommends allow, verify or hold. You decide with one click, and every decision is logged in an audit log you can export for chargeback disputes. See RiskClarity.