Overview
Curobi's fraud protection watches the first order of every new subscription and, when that order is cancelled as fraud or for a declined payment, or Shopify recommends cancelling it, pauses the subscription before its next charge, cancels it, or only alerts the merchant, as the merchant chooses — on every plan, including Free.
Curobi checks the first order of every new subscription. If you cancel that order as fraud or for a declined payment, or Shopify's own risk analysis recommends cancelling it, Curobi acts on the subscription the order started. A first order cancelled for any other reason, such as stock, an address fix or the customer's request, only raises an alert, and a risk rating on its own never cancels anything: at most it pauses.
You choose what happens in Settings, under Fraud protection. Pause the subscription, the default, so it stops before its next charge and the customer can't resume it from their account until you've reviewed it. Cancel it, which happens only when you cancelled the first order as fraud or for a declined payment, and becomes a pause when Shopify only recommends cancelling. Or only alert you, which leaves the subscription renewing until you stop it.
A flagged subscription carries a Fraud check badge in the subscriptions list and a banner on its page explaining why, with a Mark as reviewed button. On the Business plan and up the same flags appear in a Fraud protection area of the Risk Center. A flag stays open until you mark it reviewed, resume or cancel that subscription, or it ends, and a fraud-paused subscription resumed anywhere else stays flagged as resumed after a fraud hold.
A pause or cancel made by fraud protection sends nothing out: no customer email, no Shopify Flow trigger, no Klaviyo event and no webhook, so whoever used the card isn't emailed a link to resume. In the customer portal a held subscription shows "On hold. Contact the store to resume." in place of Resume. Fraud protection covers first orders; renewal orders and chargebacks aren't covered yet.
What Fraud Protection gives you
- Watches the first order of every new subscription
- Acts when that order is cancelled as fraud or for a declined payment, or Shopify recommends cancelling it
- Pause (the default), cancel or only alert: your choice in Settings
- A risk rating on its own never cancels a subscription
- A Fraud check badge, a banner with Mark as reviewed, and a Risk Center area on Business and up
- No customer email, Flow trigger, Klaviyo event or webhook for a fraud pause or cancel
- Held subscriptions can't be resumed from the customer portal
- On every plan, including Free
How to set up fraud protection in Curobi
Choose what happens
In Curobi, open Settings and find Fraud protection. Keep the default, pause the subscription, or choose to cancel it or only be alerted.
Cancel fraudulent first orders as usual
When you cancel a subscription's first order in Shopify as fraud or for a declined payment, or Shopify recommends cancelling it, Curobi acts on the subscription that order started.
Review flagged subscriptions
Open a subscription with a Fraud check badge, read the banner, and click Mark as reviewed once you've dealt with it, or resume or cancel it from its page.
Related terms: Subscription Contract, Involuntary Churn.
Questions merchants ask
Does Curobi protect against subscription fraud?
Yes, on every plan. Cancelling an order in Shopify doesn't cancel the subscription it started, so a subscription bought with a stolen card would otherwise keep charging that card every cycle. When a subscription's first order is cancelled as fraud or for a declined payment, or Shopify recommends cancelling it, Curobi pauses the subscription before its next charge; you can choose to cancel it instead, or only be alerted. A risk rating on its own never cancels a subscription, nothing is emailed to the buyer, and the customer can't resume a held subscription from their account until you review it.
Does Curobi store customer payment or card data?
No. Because recurring charges run on Shopify's native billing rails, Curobi never handles, sees, or stores customer payment-card data. It persists only Shopify identifiers (GIDs) and subscription status — no raw customer personally identifiable information is stored at rest.