Shopify Protect in 2026: What It Covers Today, What Is Still Coming, and Your Black Friday Fraud Setup

Shopify Protect is Shopify's set of fraud and chargeback tools for stores on Shopify Payments. On October 28, 2026, Shopify relaunched it as the umbrella for everything it does against fraud, from blocking stolen cards at checkout to writing your dispute responses. Shopify's launch post ends: "Shopify Protect is on today for every business on Shopify Payments."¹ The Fall '26 Edition page for the same features says: "Features rolling out soon."²

Both are true, and the gap between them matters four weeks before Black Friday on November 27. This is part four of our series on Shopify's Fall '26 Edition. The overview covers the whole release. This article separates what you can switch on today from what is still a waitlist, checks the numbers Shopify is using, and gives you a setup to finish before peak season.

The short version

• Live today, automatically: high-risk payments are blocked before authorization, and Shopify writes an AI defense for every card chargeback by default.¹³
• Chargeback coverage has not changed yet. It still pays out only on US stores, Shop Pay orders, and fraudulent or unrecognized chargebacks.⁴⁵ Coverage beyond Shop Pay is "Coming soon."²
• The Rule Builder is a waitlist. The new app lets you write your own fraud rules, and it charges per screened transaction once you are in.¹⁶
• The headline stats have no method attached. "60% more 'product not received' disputes won" has no visible footnote, and the other figures are platform-wide.²
• Merchants are skeptical going in. The loudest complaints this year were about Protect's narrow coverage, risk detail that disappeared, and blocks merchants could not override.
• For Black Friday, set up what exists now. Do not plan peak season around features labeled "rolling out soon."

What is Shopify Protect?

Shopify Protect started as free chargeback protection for US Shop Pay orders. Shopify's help center still describes it that way: "Shopify Protect for Shop Pay (Shopify Protect) offers chargeback protection from fraud for Shopify merchants."⁴

The October 28 launch turned the name into a brand for all of Shopify's fraud and dispute tools. In Shopify's words: "Today, we are introducing Shopify Protect, which brings all of our fraud and dispute tools together across the life of an order." Much of it "works automatically for every business on Shopify Payments, at no extra cost."¹

So "Shopify Protect" now means two things. One is the chargeback guarantee, which has strict limits. The other is a collection of fraud defenses, some of which apply to every Shopify Payments store. Most confusion about Protect comes from mixing the two up.

What is live today, and what is not

Feature	Status on October 31, 2026	Who gets it
Blocking high-risk payments before authorization	Live	Shopify Payments stores
AI-written dispute defense on card chargebacks	Live, on by default	Shopify Payments stores
Automatic evidence submission on the due date	Live	Shopify Payments stores
Card testing protection	Live	Shopify Payments stores
Chargeback reimbursement for fraud	Live	US stores, Shop Pay orders only
Plain-language risk explanation on every order	Announced as live, not yet in the help docs	Shopify Payments stores
Fraud report in Analytics	Announced ("will show")	Not yet available
Protect Rule Builder (custom fraud rules)	Waitlist	Not yet generally available
Chargeback coverage beyond Shop Pay	Coming soon	No date published

Sources: Shopify's launch blog, Fall '26 Edition page, Rule Builder app listing and Help Center, read October 31, 2026.¹²³⁶⁷

What works automatically right now

• Pre-authorization blocking. "When we are near-certain a payment is fraudulent, it is declined before it is sent to the banks for authorization," so there is no order to cancel and no refund to issue.¹ You can see these in the Blocked view of Orders > Abandoned checkouts.⁷
• AI dispute responses. "For card payment chargebacks and inquiries, a defense of your case is written for you by Shopify using AI and added to your response by default." Shopify also "automatically collects evidence and sends it to the credit card company on the due date."³
• Card testing protection. Shopify says it is now blocking "17 times more card-testing attacks than we were in January."¹

None of this needs setup. It does need Shopify Payments. Stores on a third-party gateway get fraud analysis but not these defenses.⁸

What is still coming

• The Rule Builder. The new Shopify Protect: Rule Builder app lets you "choose the signals that matter to you, then either block the payment, request 3D Secure, or hold the order for review," and preview a rule against "your past 90 days of orders" before it goes live. Shopify's launch post asks merchants to "Join the waitlist."¹ The App Store listing, live since October 27, prices it at "Free to install, then $0.07 per screened transaction."⁶ That fee is Shopify's, and it applies to every transaction a rule screens, so model it against your order volume before you build broad rules.
• The Analytics report. "A new report in Analytics will show what Shopify Protect blocked, what it challenged, and what that was worth to you in dollars."¹ Future tense.
• Coverage beyond Shop Pay. "Extend chargeback protection to orders not on Shop Pay, and get reimbursed on fraud chargebacks while Shopify helps you win disputes. Coming soon."² The launch post: "Next up, we are extending charge-back coverage beyond Shop Pay."¹

What does Shopify Protect actually cover?

This is the part that has not changed, and it is the part merchants most often misread. The chargeback guarantee pays you back only when all of these are true:

• You are in the US. "You must be located in the United States and have a United States Shopify Payments account."⁵
• The order was paid with Shop Pay. "Shopify Protect is only available for orders processed through Shop Pay," including Shop Pay on Facebook, Instagram or Google. "Shop Pay Installments orders aren't eligible."⁵
• The order is all physical goods. "Shopify Protect only protects orders that exclusively contain physical items requiring shipping." Digital products and in-store pickup are excluded.⁵
• You shipped fast. "Orders must be fulfilled with valid tracking within 7 days of the order being placed and in transit to the customer within 10 days to be protected."⁵
• The address did not change. "Changing the shipping address on an order after checkout voids the Shopify Protect coverage for that order."⁵
• The chargeback is for fraud. Only fraudulent ("the cardholder claims that they didn't authorize the charge") and unrecognized chargebacks are covered.⁴

When a covered chargeback lands, "you don't need to take any action." The disputed amount and the chargeback fee are debited and then "immediately reimbursed to you as a credit."⁴ Product not received, damaged, defective and not-as-described chargebacks are not covered. "Shopify Protect doesn't protect against these types of chargebacks."⁴

The seven-day shipping window is the trap for Black Friday. If a protected order ships on day eight because your warehouse is backed up, it is no longer protected. Plan fulfillment capacity, not just inventory.

Checking Shopify's numbers

Shopify launched Protect with several statistics. Here is what each one does and does not tell you.

• "Shopify Payments prevents 12K+ high-risk payments each minute."² This is a platform-wide count. As Trevor Fenner of Ecommerce Paradise put it, "That figure covers the whole platform, so it says nothing about your store's fraud rate."⁹ Shopify's launch post gives a related figure, "2.8 billion high-risk payments prevented by Shopify Payments in the past six months," citing "Shopify Payments data, April-October 2026."¹ By our arithmetic, 2.8 billion over six months averages about 10,600 per minute. Shopify does not explain how the two figures relate.
• "60% more 'product not received' disputes won with Shopify Protect."² We could not find a footnote, sample, time period or baseline for this one on the Edition page, and it does not appear in the launch post.
• "Up to 1.6x higher dispute win rates by category since this year's rebuild."¹ The source given is "Shopify Payments dispute data, 2026." "Up to" and "by category" mean some categories improved less, or not at all.
• "A $100 dispute costs a business about $238."¹ This combines Shopify data with a Mastercard and Datos estimate of handling costs. It is a useful reminder that the cost of a chargeback is not just the refund.

Fenner's summary applies to all of them: these are "Shopify-reported figures that nobody has independently verified."⁹ They may be accurate. They are not evidence about your store.

The network effect, and its limits

The genuinely new idea in this release is cross-store fraud detection. Vanessa Lee, Shopify's VP of Product: "We can recognize when the same card or address is used at different stores on Shopify, helping us spot fraud patterns across the network. So if they've attacked one store and go to another, we can deny them."¹⁰

That is a real advantage that a standalone store cannot match. It also means decisions about your customers are made by a model you cannot see, and that model can be wrong in both directions, as the next section shows.

How merchants are receiving it

Three days after launch, we found no Shopify Community thread, Reddit discussion or trade-press story about the new Protect features themselves. What exists is a year of merchant frustration with Protect and Shopify's fraud tools, which is the backdrop this launch lands on.

"One feature kept me here"

A merchant selling custom pieces over 1,500 dollars wrote in March: "shopify was simply too large for us as a small business, but one feature kept me here - shopify protect." After a chargeback Protect did not cover, they added: "i would gain the $3,700 a year i spend on shopify subscriptions and move back to a platform that costs me $400/yr for the same thing."¹¹ Another forum regular pointed to Protect's terms listing "Acceptable Reason Codes" and asked: "but who would expect this after reading the ad… Is it false advertising? Possibly."¹¹

US-only, still

A Canadian merchant asked in October when Protect would reach Canada: "They introduced it in the US 4.5 years ago. In Canada, Shop Pay just seems like a conduit for fraud." The current alternatives, they said, "fall well short of what Shopify offers for US merchants via Protect."¹² The new launch materials do not mention any region expansion.

Risk detail that disappeared

In late September, a merchant reported that order risk cards stopped showing billing address and IP mismatch detail: "MANY times Shopify sent me Low risk when in fact nothing worked."¹³ Shopify's new promise that every order "carries a plain-language explanation of its risk and the reasons behind it" speaks directly to that complaint, if it delivers.¹

Blocks merchants cannot override

In mid-October, a merchant running several UK stores saw every payment blocked by Shopify Payments' risk system with a zero percent chargeback rate: "no banner, %0 chargeback, and regular customers trying to buy products." A reply explained the problem the Rule Builder is meant to solve: "Shopify Payments doesn't let merchants create or edit payment risk rules."¹⁴

Vendors: keep it on, and cover the gaps

Chargeback vendors have a commercial interest here, so read them with that in mind. Their position is consistent. Chargeflow: "Keep Shopify Protect on. It is free, and it deals with the fraud cases it covers by itself." It also quotes Shopify's terms: "Shopify Protect does not constitute insurance," and Shopify "may stop offering Shopify Protect at any time."¹⁵ Redo's Ben Woodward makes the ratio point: "Protect covers the money, not the ratio," because a reimbursed chargeback still counts against your card network chargeback ratio, and "Coverage is least available exactly when a rising ratio makes you want it most."¹⁶ Chargeback.io: "Protect pays you after the fact, so the chargeback itself never goes away."¹⁷

Why the timing matters

Fraud does not arrive on Black Friday and leave on Cyber Monday. Stripe's analysis of the 2025 holiday season "found fraud activity began trending upward on November 8 and remained elevated throughout December," and more than 61% of merchants in Chargebacks911's 2026 field report said chargebacks had become more frequent over the past three years.¹⁸ Chargebacks911's founder, Monica Eaton, put the delay plainly: "The sale happens at Christmas, but the loss can arrive in February."¹⁸

That means the fraud setup you have on November 8 is the one that faces the peak. Features that roll out in December help with next year.

Your Black Friday fraud setup, using what exists today

This week

1. Confirm you are on Shopify Payments and that Shop Pay is on. Most of the new defenses, and all chargeback coverage, depend on it.⁸
2. Push customers toward Shop Pay if you are a US store. It is the only payment method with chargeback reimbursement today.
3. Check the Blocked view in Orders > Abandoned checkouts to see what Shopify is already stopping.⁷
4. Set up Shopify Flow risk workflows. Use the "Order risk analyzed" trigger to tag, hold or cancel high-risk orders, rather than reviewing each one by hand at peak volume.¹⁹
5. Join the Rule Builder waitlist if you have recurring fraud patterns that need custom rules, and budget for the per-transaction fee.⁶

Before November 27

6. Plan fulfillment to the seven-day window. Protected orders must ship with valid tracking within 7 days. Late shipping silently removes coverage.⁵
7. Avoid editing shipping addresses after checkout on high-value orders. It voids Protect coverage.⁵
8. Leave the AI dispute defense on, but read it before the due date on large disputes. Response windows run "from 7 to 21 days," and Shopify submits automatically on the due date.³
9. Prepare for product-not-received claims, which Protect does not reimburse. Use carriers with delivery photos and keep proof-of-delivery records. Our chargeback reduction guide covers the checkout signals that prevent these.

If you sell outside the US or off Shop Pay

10. Assume no reimbursement. Use fraud analysis, Flow, 3D Secure and, if your volume justifies it, a third-party fraud or chargeback app. Our Shopify fraud prevention guide explains when each tool fits.

AI shopping agents add a new wrinkle this season. Agent checkouts can look like bots, and legitimate agent orders are already being flagged as high risk, as we covered in part two on AI shopping agents. Watch your blocked and high-risk lists for false positives from agent traffic.

If a payout hold or a wave of disputes would sink your quarter, read our guide to Shopify Payments account holds now, not in December. If you want a second pair of eyes on your fraud setup before Black Friday, our Shopify optimization team can review your payments, risk workflows and fulfillment timing, with a scoped plan within 48 hours.

Frequently asked questions

What is Shopify Protect?

Shopify Protect is Shopify's set of fraud and chargeback tools for stores on Shopify Payments. It blocks high-risk payments before authorization, writes AI dispute responses and, for eligible US Shop Pay orders, reimburses fraudulent and unrecognized chargebacks. Shopify relaunched it as an umbrella brand on October 28, 2026.

Is Shopify Protect free?

The core protections are free for stores on Shopify Payments, including chargeback reimbursement on eligible Shop Pay orders. The new Shopify Protect: Rule Builder app is free to install and then charges per screened transaction, according to its App Store listing.

Does Shopify Protect cover all chargebacks?

No. It covers only fraudulent and unrecognized chargebacks on eligible orders: US stores, paid with Shop Pay, physical goods only, fulfilled with valid tracking within 7 days. Product not received, damaged, defective and not-as-described chargebacks are not covered.

Does Shopify Protect work outside the US?

Chargeback reimbursement does not. You must be located in the United States with a US Shopify Payments account. Some defenses, like pre-authorization blocking and AI dispute responses, apply to Shopify Payments stores more broadly.

What is the Shopify Protect Rule Builder?

It is a new Shopify app that lets merchants write their own fraud rules: block the payment, request 3D Secure, or hold the order for review, based on signals they choose. You can preview a rule against the past 90 days of orders. As of October 31, 2026, access is through a waitlist.

Will Shopify Protect cover orders that don't use Shop Pay?

Shopify says coverage beyond Shop Pay is coming soon, but has not published a date, regions or terms. Today, only Shop Pay orders are eligible for reimbursement.

How long do I have to respond to a Shopify chargeback?

Shopify's help center says the due date varies from 7 to 21 days after the chargeback or inquiry is filed. Shopify collects evidence and submits it automatically on the due date, including an AI-written defense by default.

What should I set up before Black Friday?

Confirm Shopify Payments and Shop Pay are on, set up Shopify Flow workflows on the "Order risk analyzed" trigger, plan fulfillment so protected orders ship with tracking within 7 days, and avoid changing shipping addresses after checkout. Do not rely on features labeled "rolling out soon" for peak season.