IP address dispute evidence: how to use IP and device data in a Shopify chargeback

A customer says they never placed the order. Your admin shows an IP address in Melbourne and a billing address in Melbourne. Is that enough to win, or does the bank want more?

To use IP address dispute evidence well, treat the IP as one supporting fact, not proof. Show where the order came from, that it matches the billing or shipping location, and that the same IP or device appears on earlier orders the cardholder did not dispute. Shopify says an IP address by itself is not a fraud recommendation.

This guide is for you if:

• You have a fraud or unrecognised chargeback on a Shopify order, and the order page shows an IP address and country you are not sure how to use.
• You want to know when IP address dispute evidence helps a response, and when it can hurt your credibility.
• You would like a short routine for reviewing risky orders before shipping, so the next IP address dispute evidence file is already half built.

Last updated: 15 October 2026. Written by the ChargeFix team. Reviewed against sources on 15 October 2026.

The 30-second answer (TL;DR)

• IP address dispute evidence shows where an order was placed from. It does not show who was typing, so use it alongside other facts.
• Shopify lists IP and country in its evidence for fraudulent and unrecognised claims, but its fraud analysis page says an IP or location by itself is not a fraud recommendation.
• The strongest use is a match: the same IP or device on earlier orders that the cardholder paid and never disputed.
• Visa Compelling Evidence 3.0 uses an IP address or device ID plus a shipping address or user ID across at least two prior undisputed transactions, but only for one fraud reason code.
• VPNs, mobile networks, shared Wi-Fi and travel can make an honest customer look wrong, so explain mismatches instead of hiding them.
• Winning does not remove a dispute from your chargeback rate, so reviewing risky orders before shipping is cheaper than rebutting later.

Quick note: An IP match feels decisive because it looks technical. A reviewer sees IP address dispute evidence as one clue. Your job is to line it up with names, addresses, delivery and history so that the clues agree.

From dispute to decision

Stage	What happens	Your move
Day 0: dispute lands	A chargeback takes the amount and the A$25 fee straight away	Read the reason and the due date
Days 1 to 3	The window runs, usually 7 to 21 days	Pull the order risk details and earlier orders
Days 4 to 8	Gaps get filled	Match IP, device and addresses across orders
Before the due date	You respond	Submit a finished file a few days early
After you submit	The card company reviews, up to 75 days	Keep your records

What is IP address dispute evidence, and where does Shopify show it?

It is the network address your store recorded when the order was placed, plus the location and device clues that come with it. On Shopify you find it in the Order risk section of the order page. Shopify lists IP and country in the evidence it suggests for fraudulent and unrecognised claims.

Shopify's help pages describe the pieces. The Shopify fraud analysis page lists indicators such as whether the card passed an address check, whether the CVV was correct, whether the customer's location matches the payment method, unusual device or network activity, and whether more than one card was tried. The IP address is shown separately from those indicators, and the page says an IP address or location description by itself is not a fraud recommendation.

So IP address dispute evidence is real and Shopify wants you to include it, but the same help page warns against reading too much into it. That balance should shape the file: include the IP, say what it shows, and do not overclaim.

A short glossary helps. An IP address is the number your network uses to reach the internet. IP geolocation is a guess at the country or city from that number. A device fingerprint is a set of device traits, such as browser and screen settings, that can suggest the same device returned. Shopify's pages I opened mention device and network activity as an indicator, but they do not explain how a device fingerprint is built, so I will use the term only for the general idea.

What can IP address dispute evidence and device data prove, and what can't it?

IP and device data can show that an order came from a place consistent with the cardholder, and that the same network or device was used before. It cannot show who was at the keyboard. That distinction is the line between a helpful exhibit and a weak one.

Claim the bank is testing	What IP and device evidence can show	What it cannot show
The cardholder placed the order	The order came from the cardholder's city or country, and from a network or device used on earlier paid orders	That the cardholder, not someone in the same house, pressed the button
The order was not made by a stranger	The IP does not sit in a distant country from billing	That a VPN was not used
The customer is a known buyer	The same IP or device appears on prior undisputed orders	That the earlier orders were all the same person
The customer received the goods	For digital goods, the IP of a download event	That the cardholder is the person who downloaded

Chargeback Gurus, a vendor that sells dispute services, lists IP address matched to previous purchases, geolocation consistent with the cardholder, and a device fingerprint matching a device used before as the ways this data can help. It makes no claims about win rates, and it is vendor content, so I use it for the list of ideas only.

The word to keep in mind is consistent. IP evidence is good at showing that nothing looks odd. It is poor at proving that something is true. A file that says "the order came from the same city as the billing address and the same network as three earlier paid orders" is accurate and useful. A file that says "the IP address dispute evidence proves the cardholder placed this order" will not survive a reader who knows IPs are shared.

How do you pull IP address dispute evidence from a Shopify order?

Open the order, find the Order risk section, and note the risk level, the recommended next step, the indicators, the IP address and the location description. Take a dated screenshot. Then repeat for each earlier order from the same customer or network that you want to compare.

Shopify's help pages say the IP geolocation appears in the Order risk section under the order risk evaluation or the "About this order" area, and that medium and high risk orders show a warning symbol on the Orders page. Shopify fraud analysis covers online credit card orders Shopify can verify, so IP geolocation data may be missing on others. Test orders, free orders, gift-card-paid orders, Point of Sale orders, B2B orders and subscription renewals get no recommendation, so some orders will not have the data you expect.

Plan limits matter too. Shopify says indicators need the Basic plan or higher and recommendations need the Grow plan or higher, or Shopify Payments. If you ship an order that had no risk data, say so in the file rather than hoping nobody asks.

Here is a capture list that works for most fraud disputes.

IP AND DEVICE CAPTURE: Order #[number]
- [ ] Order date and time, amount, payment method
- [ ] Risk level and recommended next step, with screenshot date
- [ ] Indicators listed (address check, CVV, location, device or network, cards tried)
- [ ] IP address and location description
- [ ] Billing city/state and shipping city/state
- [ ] Earlier orders from the same customer: numbers, dates, amounts, IPs
- [ ] Whether any earlier order was disputed or refunded for fraud
- [ ] Notes on VPN, mobile network or travel, if the customer mentioned them

Keep it as a single page. Reviewers read a lot of files, and a clean one-page record of IP address dispute evidence is easier to trust than a screenshot dump.

How does IP address dispute evidence across prior undisputed orders strengthen a response?

A repeat match is the best use of IP address dispute evidence. If the disputed order and two or three earlier paid orders share an IP or device, and the cardholder never disputed those prior undisputed orders, that is a pattern of normal use. It makes a stranger placing the disputed order less likely.

Evidence	Disputed order	Earlier order 1	Earlier order 2	Earlier order 3
Date	2 Nov 2026	14 Mar 2026	29 May 2026	3 Aug 2026
Amount	A$320	A$85	A$110	A$140
IP / network	Same	Same	Same	Different
Device	Same	Same	Same	Same
Shipping address	Same	Same	Same	Same
Disputed?	Yes	No	No	No

This table is an illustration with invented data. Notice what it does: it shows the disputed order matches three earlier orders on the shipping address and the device, and two of three on the IP. It admits that one earlier order came from a different network. That honesty helps, because real customers move between home, work and mobile data.

Visa's Compelling Evidence 3.0 formalises this idea for one fraud reason code, 10.4. Stripe's documentation and Visa's materials describe the requirements: at least two prior undisputed orders (Visa calls them transactions) in a window of roughly 120 to 365 days, at least two matching elements with one being an IP address or device ID and another being a shipping address or user ID, and the first 6 characters of the statement descriptor matching. It does not apply to not-received claims. I could not verify how, or whether, Shopify Payments applies Compelling Evidence 3.0 to your disputes, so do not assume it happens automatically. The post on disputes from a repeat customer covers the history side in detail.

When can IP address dispute evidence hurt more than it helps?

When you rely on it alone, or when it is easy to explain away. IPs are shared by households, offices and mobile networks, so "the same IP" can mean "the same flat". A VPN and proxy IP can make a Sydney customer look like they are in another country. A traveller can order from abroad.

Situation	What a reviewer may think	How to handle it
IP in a different country from billing	Possible fraud	Explain it if the customer mentioned travel or a VPN; show earlier orders from that place
VPN and proxy IP in use	Location is hidden	Do not claim a location match; rely on card checks and history
Shared household IP	Another person could have used the card	Add names, delivery and messages that point to the cardholder
Mobile data IP	Location is vague	Use the billing and shipping match instead
IP matches but names do not	The buyer may not be the cardholder	Add context, such as a gift or work purchase

Say what you can show and what you cannot. If the IP is in another country and you have no explanation, put the explanation you do have first: the card passed its checks, the earlier orders match, the delivery went to the verified address. Do not hide the mismatch, because the reviewer can see it.

I could not verify from the Shopify pages how Shopify fraud analysis treats a VPN and proxy IP, so I describe the general idea only. A VPN and proxy IP can also hide a genuine customer, so never treat one as proof of fraud.

What should you do in the first 48 hours of a dispute that relies on IP address dispute evidence?

Read the reason, note the due date, check your balance, and take screenshots of the order risk section before anything changes. Pull earlier orders from the same customer and compare IP and device data across prior undisputed orders. Do not accuse the customer, and do not delete or change any record.

Here is a day-by-day plan for an order placed on Monday 2 November 2026. The dispute lands on Monday 16 November 2026, 14 days later, with a due date of Monday 30 November 2026. Your due date will be on the notice, and Shopify says it is usually 7 to 21 days. I could not verify how public holidays change the date, so finish early.

Date	Task	Output
Mon 16 Nov	Read the reason and due date. Check your balance.	One-line note
Tue 17 Nov	Screenshot the Order risk section and payment checks.	Risk record saved
Wed 18 Nov	Find earlier orders from this customer, network and device.	Comparison table drafted
Thu 19 Nov	Save tracking and delivery proof. Check billing and shipping match.	Delivery evidence saved
Fri 20 Nov	Write to the customer, kindly, asking whether they placed the order.	Message sent
Mon 23 Nov	Draft the cover note.	Draft v1
Tue 24 Nov	Read it cold as the bank reviewer. Fix gaps.	File v2
Thu 26 Nov	Submit, two business days before the due date.	Confirmation saved

Shopify Payments sends your response on the due date even if you add nothing, so a half-built file at the deadline still goes out. Submit the finished file on the Thursday.

Shopify's guidance also says customers are expected to contact you before going to their bank, and that if they did not, you should say so in your file. An unanswered, polite message from you is a useful exhibit.

How should you write the cover note around IP address dispute evidence?

One page, dated facts, numbered exhibits. Lead with the strongest facts, which are usually delivery proof and the card checks, and use IP address dispute evidence and device data as support. State plainly what the IP shows and what it does not. Do not accuse the cardholder of lying.

RESPONSE TO DISPUTE: Order #[number]

Summary
On [date], an order for A$[amount] was placed on [store] using the card ending
[last four]. The cardholder's billing address is [suburb, state]. The dispute reason
given is "[reason]". The order was delivered to [suburb, state] on [date].

Facts, in date order
1. [Date, time]: Order placed. Payment checks: [AVS], [CVC], [3D Secure].
   (Exhibit 1)
2. [Date, time]: Order risk evaluation: [level], recommendation "[next step]".
   (Exhibit 2)
3. [Date, time]: IP address [number] with location shown as [description]. This is
   consistent with the billing address in [suburb, state]. (Exhibit 3)
4. [Date range]: [Number] earlier orders from this customer, none disputed. [Number]
   share the same IP or device with this order. (Exhibit 4)
5. [Date, time]: Shipped with [carrier], tracking [number]. (Exhibit 5)
6. [Date, time]: Delivery recorded to [address], matching the order. (Exhibit 6)
7. [Date, time]: Customer contacted. [Reply, if any.] (Exhibit 7)

What the IP does and does not show
The IP address shows the order came from [location]. It does not identify the person
who placed it. We include it with the card checks, delivery record and order history.

Request
We ask that the dispute be decided in our favour.

The sentence "what the IP does and does not show" is not a weakness in IP address dispute evidence. It tells the reviewer you understand the limits, which makes the exhibits easier to believe.

What if the customer says someone else used their card?

That is the classic fraud claim, and it can be true. Cards are stolen, and a genuine cardholder is not lying. Your file should not argue that they are. It should show that the order, the delivery and the history point to a normal purchase, or admit where they do not.

Look for three things in your records. First, whether the delivery address is the cardholder's own, or one the cardholder has used before. A thief usually wants the goods sent somewhere else. Second, whether the account has prior undisputed orders with matching details. Third, whether the customer replied to your messages in a way that fits the order. If all three line up, say so in dated facts.

If none of them line up, you may be looking at real fraud. In that case, a quick refund can cost less than a long fight you may lose, and Shopify says you can refund from your admin if you owe one. I could not verify how a refund interacts with an open dispute, so check with your payment provider first. Write down what you learned, and tighten your pre-ship review for orders that look the same.

What does a fraud dispute cost, and is it worth fighting?

Usually it is worth responding, because the money is already gone and a response costs only time. If you win, you recover the order and the A$25 fee. Scale the effort to the order, then do the sums.

Here is an illustration with invented figures. A A$320 order is disputed as fraudulent. Winning recovers A$345 (A$320 plus the A$25 fee). One hour of your time at A$60 is A$60, and A$60 divided by A$345 is 0.174. So a 17.4% chance of winning covers an hour. If matching IP evidence and a delivered address lift your odds to 50%, expected recovery is A$172.50 (0.50 times A$345), which beats A$60 of time.

Now the prevention sum. A store takes 500 orders in a month and has 6 fraud disputes. That is 1.2% (6 divided by 500). At an average of A$145 plus the A$25 fee, A$170 each, losing all six costs A$1,020 (6 times A$170). Reviewing medium and high risk orders takes 3 minutes each. If 30 orders a month need a review, that is 90 minutes, or A$90 at A$60 an hour. If the review prevents one lost dispute (A$170), it pays for itself. These are illustrations, and your numbers will differ.

Item	Amount
Orders in the month	500
Fraud disputes	6
Share disputed	1.2%
Average order plus fee	A$170
Loss if all six are lost	A$1,020
Review time (30 orders, 3 minutes)	90 minutes, A$90

Shopify says the chargeback rate is based on disputes filed, not outcomes. I could not verify current thresholds for Australia, since card schemes use their own definitions.

How do you review a risky order before it ships?

Open the risk details, read the recommended next step, and check the IP, billing and shipping against each other. Contact the customer when something looks off. Ship only when the picture makes sense. A few minutes now saves an hour of rebuttal later.

Shopify fraud analysis guidance suggests checking the risk level and recommended next step rather than any single indicator, waiting for analysis to finish before fulfilling, and for high-risk orders verifying, cancelling or refunding. They also mention manual payment capture, so you can investigate before accepting payment, and a Contact customer action that opens an email without sending it. For orders that go through Shopify Payments, high-risk checkouts can be blocked before an order exists.

Check	What you look for	If it fails
Risk level and next step	Low, medium or high, and Shopify's suggestion	Confirm with the customer or consider cancelling
Address check and CVV	Both passed	Ask for another card or contact the customer
IP location against billing	Same country, ideally same region	Ask why; note travel or VPN
Billing against shipping	Match, or an explained gift	Ask the buyer to confirm
Order history	Earlier paid orders, none disputed	Treat new customers on a big order with extra care
Cards tried	One card	Hold the order and review

IP address dispute evidence works best beside address checks. The guide on matching billing and shipping details as evidence goes through the address side in detail.

Here is a pre-ship routine for orders above a threshold you choose.

PRE-SHIP RISK REVIEW (orders above A$[threshold] or flagged medium/high)
- [ ] Risk level and recommended next step read and noted
- [ ] Address check and CVV results noted
- [ ] IP location compared to billing; difference explained or order held
- [ ] Billing and shipping compared; gift or business reason noted
- [ ] Earlier orders checked; none disputed
- [ ] Customer contacted if anything looks off; reply saved
- [ ] Screenshot of the risk section saved to the order folder

Does IP address dispute evidence work for digital products?

Sometimes, and more directly than for physical goods. With digital downloads, IP address dispute evidence is the IP of each download event shows when someone retrieved the file, from where. If the download came from the same network as the order, you have a neat chain. If it came from elsewhere, you have a question to explain.

Shopify's Digital Downloads help page says each order's history lists every download or link open, with the date, customer IP address, referrer and user agent, and that the Orders section shows the number of downloads. Opening the email or the page it links to does not count as a use, and each press of a link button does. The page states no expiry date for customer download links. The post on digital product delivery proof covers this in detail.

For physical goods, there is no download log, so IP evidence at order time is your main network record, with IP geolocation as a rough guide to where it came from. Pair it with delivery proof and the match checks above.

What's different for Australian merchants?

General information, not legal advice.

Fees and process

The chargeback fee on Shopify Payments in Australia is A$25, returned if you win. The response window is usually 7 to 21 days and the card company's review can take up to 75 days after you submit. If your balance is short, Shopify debits your bank account and tries again after 3 business days.

Time limits and records

State consumer bodies say chargeback time limits commonly run from 45 to 120 days depending on the card provider, and the ACCC notes that time limits may apply. I carried that range from earlier research and could not re-open the Consumer Affairs Victoria page today. Pay Advantage, an Australian payments provider, advises keeping records for 12 to 18 months and says the cardholder's name should match your invoice or paperwork, because a mismatch can lead the issuer to find the evidence insufficient. Take your IP address dispute evidence screenshots at the time, since the order page can change.

Banks and rules

Pay Advantage says chargebacks in Australia are governed by the ePayments Code, administered by ASIC, and apply to most Australian banks and to Visa, Mastercard and American Express. Pay Advantage also suggests 3D Secure for higher-risk transactions and manual checks, such as calling the customer, for suspicious orders.

Privacy

I could not verify from the pages I opened whether an IP address counts as personal information under Australian privacy law, or what you must tell customers about collecting it. Keep your privacy policy accurate, collect only what you need to run the store and defend disputes, and get advice if you plan to store IP data for long periods.

What I could not verify: how Shopify Payments applies Compelling Evidence 3.0, how Shopify treats VPN addresses, how public holidays affect due dates, how a refund interacts with an open dispute, and Australian privacy rules on IP data.

What are the common mistakes with IP address dispute evidence?

• Treating IP address dispute evidence as proof of who placed the order instead of where it came from.
• Hiding a country mismatch rather than explaining it.
• Sending a screenshot dump instead of a one-page comparison of IP and device evidence.
• Offering IP evidence under Compelling Evidence 3.0 when the dispute reason is not the fraud code it covers. when the dispute reason is not the fraud code it covers.
• Ignoring card checks, delivery proof and prior undisputed orders that are stronger than the IP.
• Forgetting that a VPN and proxy IP, mobile data and shared Wi-Fi are common and innocent.
• Shipping a medium or high risk order without a look at Shopify fraud analysis, then rebutting later.
• Waiting until the due date, when Shopify Payments sends whatever is on file.

Frequently asked questions

Is IP address dispute evidence enough to win a fraud chargeback?

No. An IP shows where an order came from, not who placed it. The Shopify fraud analysis page says an IP address or location by itself is not a fraud recommendation. Use it with passed card checks, a matching delivery address, order history and customer messages, and explain any mismatch.

Where do I find the IP address on a Shopify order?

Open the order and look in the Order risk section, under the order risk evaluation or the About this order area. Shopify shows the IP separately from the fraud indicators. Orders without fraud analysis, such as test, free, Point of Sale, B2B and subscription renewals, may not show the data you expect.

What does Shopify list as evidence for a fraudulent dispute?

Shopify lists the fulfilment date and time, billing information, IP address and country, and shipping and tracking details for fraudulent and unrecognised claims. Add card check results, order history, delivery proof and customer messages. Label each item so the reviewer can follow the story without opening files.

Does a VPN and proxy IP ruin my evidence?

It weakens the IP geolocation point, because the IP may not show where the customer was. Do not claim a location match if a VPN is likely. Lean on card checks, delivery to the billing address and earlier undisputed orders. I could not verify how Shopify flags these addresses.

What is Visa Compelling Evidence 3.0 in plain terms?

It is a Visa programme for one fraud reason code, 10.4. It uses at least two prior undisputed transactions and matching elements, such as an IP address or device ID plus a shipping address or user ID. It does not cover not-received claims, and I could not verify how Shopify Payments applies it.

Should I include a device fingerprint in the response?

Yes, if you have it and it matches prior undisputed orders. Shopify mentions device and network activity as a fraud indicator, but I could not verify what device data Shopify exposes to merchants. Say what you hold, show the comparison, and avoid claiming more than the data supports.

Can I use IP address dispute evidence if the customer was travelling?

Yes, but explain it. A foreign IP with a billing address at home looks odd until a message says the customer was overseas. Use earlier orders from that trip if they exist, the passed card checks, and the delivery address. A short, honest explanation beats silence.

Should I contact the customer before responding?

Yes, kindly. Shopify's guidance says customers are expected to contact you before their bank. A short message that lists the order, the delivery and the statement name can settle a mix-up. Avoid promising an outcome, because I could not verify how a withdrawn dispute is handled.

Does winning a fraud dispute stop it counting against my chargeback rate?

No. Shopify says winning does not remove a dispute from your chargeback rate, because the rate is based on disputes filed, not outcomes. You get the amount and the A$25 fee back if you win, but the dispute still counts. Using Shopify fraud analysis to review risky orders before shipping is the cheaper protection.

How long should I keep IP address dispute evidence and order risk records?

Pay Advantage suggests 12 to 18 months for transaction and customer records. Keep the order risk screenshot, IP details and earlier-order comparison for that long, since disputes can arrive months later. I could not verify Australian privacy limits on keeping IP data, so keep your policy accurate.

Start free trial with ChargeFix

ChargeFix gathers the real order, payment-check and delivery records for a Shopify dispute and drafts the response, using only real data and never inventing facts. In Manual mode you review and send each filing yourself, and Auto mode files the cases your rules allow, so your next IP address dispute evidence file starts finished instead of blank. Start free trial

Sources

• Fraud analysis, Shopify Help Center
• Reviewing orders with fraud analysis, Shopify Help Center
• Overview of the chargeback and inquiry process, Shopify Help Center
• Reasons for a chargeback or inquiry, Shopify Help Center
• Digital Downloads, Shopify Help Center
• Compelling evidence for retail chargebacks, Chargeback Gurus (vendor content)
• Understanding chargebacks, Pay Advantage
• Selling online, ACCC