Shopify Protect: What It Covers, How Fraud Rules Work, and What Merchants Should Check Before BFCM

If you've seen "Shopify Protect" in your admin or in Shopify's Fall '26 Edition and wondered whether your chargebacks are now covered, the short answer is: some are, most aren't, and the name now means more than it used to.

Until recently, Shopify Protect meant one thing: free chargeback coverage for eligible Shop Pay orders in the US. On October 28, 2026, Shopify started using the name for its wider fraud and dispute tools on Shopify Payments, and released a new app for custom fraud rules. Some of it works automatically today, some is announced, and some is still rolling out.

This guide separates the three, explains who qualifies for chargeback coverage, and ends with a checklist for the weeks before BFCM.

What "Shopify Protect" Means Now

There are two things under one name:

• The fraud and dispute tools on Shopify Payments. Shopify describes these as working "automatically for every business on Shopify Payments, at no extra cost": declining payments it's near-certain are fraudulent, explaining each order's risk, and building your chargeback responses.
• Shopify Protect for Shop Pay. The original program: Shopify covers the loss when an eligible Shop Pay order is disputed as fraud. Shopify's Help Center still describes Shopify Protect this way.

If a page only talks about Shop Pay orders, it's describing the second. Coverage of chargebacks is the narrow part; the fraud screening is the broad part.

What Works Automatically on Shopify Payments

According to Shopify, these work without setup if you use Shopify Payments:

• High-risk payments declined before authorization. When Shopify is near-certain a payment is fraudulent, it declines it before it reaches the bank, so there's no order to cancel or refund.
• Order risk you can read. Fraud analysis shows indicators such as AVS and CVV checks and location mismatches, and a low, medium or high risk recommendation with a suggested next step. Fraud indicators are available on the Basic plan and up; recommendations need the Grow plan or higher, or Shopify Payments. Some orders, such as POS, B2B and subscription renewals, don't get a recommendation.
• Dispute responses prepared for you. For chargebacks on Shopify Payments, order details are added to your response automatically, tracking PDFs can include a carrier's delivery photo, and for card chargebacks and inquiries Shopify writes an AI-generated defense, which you can exclude. The response is submitted by the due date even if you add nothing, though your own evidence still strengthens it.

None of this guarantees you'll win a dispute. Banks decide chargebacks, and Shopify says it isn't involved in that decision.

Which Chargebacks Are Actually Covered

Coverage, meaning Shopify reimburses the amount and the chargeback fee, applies only to eligible Shop Pay orders. The main conditions:

• You're located in the US with a US Shopify Payments account.
• The order was paid with Shop Pay. Shop Pay Installments orders aren't eligible.
• The order contains only physical items that ship. Any digital product or local pickup item makes the whole order ineligible.
• For subscriptions, only the first order is covered.
• It's fulfilled with valid tracking within 7 days and in transit within 10, with a supported carrier.
• The shipping address isn't changed after checkout. Changing it voids coverage.
• The dispute is for fraud or an unrecognized charge. "Not received", "defective" and "not as described" disputes aren't covered.

Check an order's Shopify Protect status in the admin rather than assuming it's covered. Everything else is a normal chargeback: the bank takes the amount and a fee ($15 USD in the US, returned if you win), and you respond with evidence.

The Rule Builder App

Shopify Protect: Rule Builder is a new app from Shopify for custom fraud rules, built without code. According to its listing, you can:

• Choose the signals that matter to your store, with reusable lists of emails, IPs and more.
• Pick an outcome: block the payment, request 3D Secure, or hold the order for review.
• Preview a rule against your last 90 days of orders before it goes live.
• Get alerted when a rule's results drift from what you tested.
• Track each rule in Shopify Analytics alongside your sales.

Pricing: free to install, then $0.07 per screened transaction, billed in USD.

What isn't documented yet: the listing doesn't state which plans, countries or payment providers the app supports, and there's no Help Center article for it yet. Shopify's Fall '26 Edition describes the fraud features as "rolling out soon", so the app may not be available to every store yet. Check what your admin shows before you plan around it.

Rule Builder vs Fraud Control vs Shopify Flow

Sources: Rule Builder listing, Fraud Control, preventing fraud.

Flow is the tool most merchants already have. Shopify's templates include holding payment capture on high-risk orders and cancelling and restocking them. If you already use Flow for this, our Flow shipping label guide shows how its triggers and conditions work.

Announced, Not Live Yet

Two parts of Shopify's October announcement aren't available yet:

• Chargeback coverage beyond Shop Pay. Shopify says it's extending coverage to orders not paid with Shop Pay; the Fall '26 Edition lists it as "coming soon". Until then, only eligible Shop Pay orders are covered.
• A Shopify Protect report in Analytics. Shopify says a new report "will show" what Shopify Protect blocked or challenged and what that was worth.

Pre-BFCM Fraud and Checkout Checklist

BFCM runs from November 27 to 30. A few checks now are better than rule changes during the sale:

• Confirm you're on Shopify Payments if you want the automatic protections, and know which of your orders use Shop Pay.
• Read the fraud analysis on a few recent high-risk orders, so your team knows what to do with "Consider canceling this order".
• Decide who reviews held orders during the sale, and how fast.
• If you add rules in Rule Builder or Fraud Control, preview or monitor them now. Prefer a hold for review over a block where a false positive would cost a real customer.
• Check that your Flow workflows for high-risk orders still run as expected.
• Fulfill with tracking within 7 days, using a supported carrier, so eligible Shop Pay orders keep their coverage.
• Avoid changing shipping addresses after checkout on Shop Pay orders, or accept that it voids coverage.
• Know where chargebacks appear and how long you have to respond, usually 7 to 21 days.

For the rest of your peak preparation, see our pre-peak checkout review and BFCM integration testing guide. Disputes and fees also show up in your Shopify Payments activity report.

The Bottom Line

Shopify Protect is now two things. The fraud screening and dispute help on Shopify Payments works automatically. The chargeback coverage is narrower: eligible Shop Pay orders from US merchants. The Rule Builder adds testable custom rules, but its availability isn't documented yet.

None of this replaces a clear review process. If you'd like a second pair of eyes on your payments, Flow workflows and checkout before the sale, our Shopify development team can help.