Friendly Fraud in Canada: How Shopify Sellers Spot and Fight It (2026)

The customer ordered a jacket in September. It arrived in a week. They emailed once to say it fit well. In November their bank tells you the order was "not authorized." Friendly fraud in Canada looks exactly like this: a real buyer, a real parcel and a dispute that says otherwise. It is frustrating, and it is also a case you can often win if you have kept the right records.

Quick answer: Friendly fraud is when a cardholder who made, or benefited from, a purchase disputes it with their bank anyway. It differs from true card fraud, where a criminal used a stolen card. Shopify's advice is to contact the customer first, because some will withdraw once reminded. If they do not, send the core order records (fulfillment time, billing, IP address and country, shipping and tracking) and any message from the customer. Strong customer history and delivery proof are what win these cases.

This guide is for you if:

• You sell on Shopify Payments from Canada and keep seeing "fraudulent" disputes from customers who clearly received their orders.
• You want to tell friendly fraud from stolen card fraud before you decide how to respond.
• You want a way to answer the customer, the bank and your own records without accusing anyone.

Last updated: 22 October 2026

Disclosure: ChargeFix publishes this guide and sells an app for Shopify Payments disputes. Shopify rules come from Shopify's Help Center. Statistics come from named sources and are global or American, because no verified Canadian figure exists, and the text says so each time.

TL;DR

• Friendly fraud is a dispute from a cardholder who actually bought, or whose household did. Visa puts it at about 20% of fraudulent disputes, and up to 30% for high volume online merchants, according to chargeback.io.
• Contact the customer first. If they agree the order was valid, they ask their bank for an official withdrawal letter.
• Past undisputed orders, matching IP addresses and delivery addresses, and a delivery record are your strongest evidence.
• Winning does not remove a dispute from your rate, so prevention matters as much as defence.
• There is no verified Canadian friendly fraud rate from a named source, so this guide does not quote one.

Do this today

1. Open the dispute and check the customer's past orders and any messages.
2. Pull the IP address and country, billing and shipping addresses, and the delivery record.
3. Email the customer with a polite, neutral question about the order.
4. If they confirm the order, ask them to request a withdrawal letter from their bank.
5. File your evidence before the due date, whatever the customer says.

Friendly fraud in Canada: the process in one table

Step	What you do	Why
1. Read the dispute	Reason, amount, due date	7 to 21 days, no extensions
2. Check the customer's history	Past orders, messages	History is your best evidence
3. Compare the signals	IP, addresses, device, delivery	They show whether the buyer is the cardholder
4. Contact the customer	Neutral email or call	Many withdraw once reminded
5. Ask for a withdrawal letter	If they confirm the order	Shopify needs it on bank letterhead
6. File evidence anyway	In Shopify's evidence order	The case is not closed until the bank says so
7. Review	Note the cause	Prevention beats defence

What is friendly fraud, and why is it different from true card fraud?

Friendly fraud, sometimes called first party fraud, is a dispute filed by a cardholder who made the purchase, or whose household received the goods. The word "friendly" is misleading, since the loss to you is the same as with theft. The difference is who is behind it.

	True card fraud	Friendly fraud
Who bought	A criminal with a stolen card	The cardholder or their household
Did the goods arrive	At a criminal's address	At the cardholder's address
Does the cardholder know the order	No	Yes, maybe forgotten
Evidence that helps	Order signals, screening	History, delivery, customer messages
Winnable	Rarely	Often, with good records

Friendly fraud has a few common causes, and most are not malicious.

Cause	What happens
Forgotten purchase	The statement name looks unfamiliar, so the customer assumes fraud
Household use	A partner, child or housemate placed the order
Buyer regret	The customer wants their money back and picks the dispute route
Subscription confusion	A renewal charge feels unexpected
Shortcut for a refund	Disputing seems faster than a return
Deliberate abuse	Rare, but it exists

Shopify's own reasons page groups the first two under Fraudulent and Unrecognized and tells you to contact the customer first, since a household member may have made the purchase or the customer may not recognize your business name.

How common is friendly fraud, and what do the numbers say?

Treat statistics here with care. The figures are global or American, and the Canadian share is not published by any source we reviewed.

Chargeback.io reports Visa's figure of about 20% of fraudulent disputes, rising to as much as 30% for busy online merchants. Juniper Research puts it at 22% of chargebacks in 2026, projected to reach 28% by 2031. Javelin's survey has merchants putting it at 20% of disputes in 2025, down from 34% in 2018, while issuers put it at 19%.

On the other side of the ledger, fraud coded disputes are won by merchants about 17% of the time, according to Datos Insights via the same source, and US merchants win about 54% of the chargebacks they choose to contest. Retail Insider reports, citing a 2026 Chargebacks911 report, that merchants who contest chargebacks win about 45% of the time, without saying whether the data is Canadian.

Statistic	Source	Scope
Roughly 20% of fraudulent disputes are friendly fraud	Visa, via chargeback.io	Global
Up to 30% for high volume online sellers	Visa, via chargeback.io	Global
22% of chargebacks in 2026	Juniper Research, via chargeback.io	Global
17% merchant win rate on fraud coded disputes	Datos Insights, via chargeback.io	Global
About 54% win rate on fought chargebacks	Mastercard and Datos, via chargeback.io	US
About 45% win rate when merchants contest	Chargebacks911, via Retail Insider	Not stated

The lesson is practical: friendly fraud is a large slice of the disputes you see, and merchants who respond win a meaningful share. That second part is the argument for a calm, evidence-based reply.

How do you spot friendly fraud?

The signals sit in your own records. None proves anything alone, but together they paint a picture.

Signal	Suggests friendly fraud	Suggests true fraud
Customer history	Repeat buyer, past orders undisputed	New customer, large first order
Delivery address	Same as past orders or billing	Different, freight forwarder or odd
IP address vs billing country	Same or close	Far apart
Messages	Customer wrote about the order	No contact at all
Product use	Activity log, account logins, reviews	None
Delivery record	Delivered, signed	Not delivered or sent elsewhere
Timing	Dispute weeks after a normal order	Dispute very quickly, with odd order pattern

A customer with three previous orders to the same address, who emailed about sizing and left a review, is almost certainly not a victim of card theft. A one-off order shipped to an address in another country using an unusual email is a different story.

Friendly fraud signal sheet

Order #: ______   Dispute reason: ______   Due: ______

History
  Past orders (count):                 ______
  Any past disputes?                   ______
  Last order date:                     ______

Match checks
  Billing address = shipping address?  ______
  Shipping matches past orders?        ______
  IP country = billing country?        ______
  Same email on all orders?            ______

After purchase
  Delivery confirmed (date)?           ______   Signature? ______
  Customer messages about the order?   ______
  Logins, downloads, reviews?          ______

My read:  [ ] likely friendly   [ ] likely true fraud   [ ] unclear

What should you say to the customer first?

Shopify says to contact the customer first. Do it politely and without accusing them. Many friendly fraud disputes end here, because the customer remembers the order or finds the household member who placed it.

Subject: A question about your order #[number]

Hi [first name],

I'm writing about your order on [date] for C$[amount], delivered on [date]
to [city]. We were notified that the card issuer received a dispute for
this charge, and I want to make sure nothing went wrong.

Do you recognize the order? Our statement name is [name], and your receipt
went to [email]. If it's right, or someone in your household placed it, you
can ask your bank to withdraw the dispute and send me the letter they give
you.

If something is wrong with the order itself, tell me and I'll sort it out.

Thank you,
[name], [store], [phone]

If the customer agrees the order was valid, they can ask their bank to drop the chargeback. Shopify says they must obtain an official withdrawal letter from their bank, on bank letterhead, showing the case number and confirming the charge details and cancellation. A screenshot of a bank statement is not enough. Even when the customer agrees, submit evidence as well, and include the customer's statement.

What the customer says	Your next step
"Oh, that's mine, sorry"	Ask for a withdrawal letter, and still file evidence
"My partner ordered it"	Same, and note it in the file
"I don't recognize it"	Send the receipt, the delivery record and the product details
"I never got it"	This is product not received; follow that route
No reply	File on your records

What evidence wins a friendly fraud dispute?

For a Fraudulent or Unrecognized dispute, Shopify's list is short and factual. The strongest friendly fraud cases add history and acknowledgment on top of it.

Evidence	Why it works
Past undisputed orders	Shows an ongoing relationship with the same cardholder
Matching IP address and delivery address	Ties the order to the usual details
Delivery confirmation or signature	Shows the goods arrived at the right place
Customer messages	A reply about the order is acknowledgment
Product use	Logins, downloads or reviews show they used it
Receipt and statement name	Answers an Unrecognized claim
Withdrawal letter	The bank's own record that the customer withdrew

Shopify's evidence order runs from direct proof, to customer acknowledgment, to policy documentation, to supporting context. Lead with the first two. A calm one page response that walks through those items beats a long argument.

Files must be PDF, JPEG or PNG, up to 2 MB each and 4 MB combined, with one file per evidence type and no links, audio or video.

What does Visa's compelling evidence rule teach you to keep?

Visa's Compelling Evidence 3.0 targets one kind of fraud dispute: reason code 10.4, other fraud in a card absent environment. Its logic is a map of what friendly fraud defence needs, even if Shopify handles the submission form.

According to Stripe's documentation, the rule asks for at least two earlier transactions on the same payment method that were paid and not disputed, and that fall 120 to 364 days before the disputed one. Matching customer data, such as the IP address or device ID, ties those earlier orders to the disputed one. It does not guarantee a win.

The takeaway is to keep your records. Do not purge order history, keep IP addresses and delivery addresses on each order, and keep customer messages. That evidence is the compelling kind, and a first time customer cannot supply it.

Compelling evidence element	What to keep
Earlier undisputed orders	Order history by customer
IP address matches	IP address and country on each order
Delivery address matches	Shipping address on each order
Device matches	Whatever device data your store records

How do you write the response?

Keep it factual and in order. Do not call the customer a fraudster.

Response to a friendly fraud dispute (adapt to your case)

Order #[number], placed [date and time] for C$[amount].

Summary
The cardholder disputes this order as unauthorized. The records below show
the order matches the customer's established purchase history and was
delivered to their usual address.

1. Customer history
   [Number] earlier orders between [dates], none disputed. The most recent
   was delivered on [date].

2. Matching details
   Billing address, shipping address and email match earlier orders. The
   order was placed from IP address [ip] in [country], the same country as
   the billing address.

3. Fulfillment and delivery
   Fulfilled on [date and time]. Carrier [name], tracking [number],
   delivered on [date] to [address]. Delivery confirmation attached.

4. Customer communication
   [Date]: the customer wrote [summary]. The email is attached.

Attached files: [list]

If the customer sent the bank's letter, attach it. If they only agreed by email, attach the email. Both are direct acknowledgment.

Should you fight or fold friendly fraud?

Use the numbers. Friendly fraud is where history can tip the balance, so the odds are better than for true fraud.

Fight or fold: friendly fraud (fill in)

Disputed amount                     = A
Fee (C$15 or US$15)                 = F   (returned only on a win)
Goods and shipping already spent    = G
Time to respond                     = T

Fold:  loss = A + F + G
Fight and win:  loss = T
Fight and lose: loss = A + F + G + T

Fight when your chance x (A + F + G) is larger than T.
Strong history and delivery proof raise the chance sharply.
A first time customer with no replies lowers it.

Situation	Usual call
Repeat customer, matching details, delivered	Fight
Customer admitted the order in writing	Fight, and attach it
First time customer, nothing else	Cost sheet decides
Small value, no evidence either way	Often fold, but note the cause

How do you prevent friendly fraud?

Defence is useful, but prevention costs less. These steps lower the count.

Step	Why it helps
Recognizable statement name	Fewer "I don't know this charge" disputes
Clear order and shipping emails	Customers remember what they bought
Easy returns and refunds	The dispute route loses its appeal
Fast support replies	Problems are fixed before the bank hears
Delivery confirmation saved	Proof ready when needed
Signature on high value orders	A named signer is strong proof
Clear policy at checkout	The customer saw the rules
Follow up after delivery	A reply becomes acknowledgment

A friendly "how is everything?" email a week after delivery serves two purposes. It catches problems, and a reply, even a brief one, is acknowledgment you can attach later.

Prevention also protects your rate. Visa's excessive line is 1.5% from April 2026 in the US, Canada, the EU and Asia Pacific, according to chargeback.io. Shopify can enrol a store at 1.5% over 90 days, which leads to automatic resolution with a full refund to the customer, no evidence window and a 10% payout reserve. Winning does not remove a dispute from your rate, and the bank can dispute a won case again.

What does friendly fraud cost a Canadian store?

Cost	Detail
Disputed amount	Taken when the dispute is filed
Fee	C$15 or US$15, returned only on a win
Goods	Lost on a loss, since the customer has them
Shipping	Already paid
Time	Hours on evidence
Rate	The dispute counts even if you win

Friendly fraud is more costly than it looks, because the customer keeps the goods and the money on a loss. That is why accepting without a look is rarely the right call when history is on your side.

What do three typical cases look like?

These cases are illustrations, built to show the pattern. They are not real stores or statistics.

Case 1: the forgotten order. A customer in Halifax orders a kettle for C$85. Their statement shows a business name they do not recognize, because the store trades under a brand name that differs from the legal name. Three weeks later a dispute arrives marked Unrecognized. The store emails the receipt, the product photo and the delivery date. The customer replies: "Oh, that's the kettle." They ask their bank for the official letter. Fix for next time: put the brand name on the statement descriptor, and mention it in the confirmation email.

Case 2: the household order. An order for C$210 of running gear arrives at a family's home. The cardholder disputes it as unauthorized. The store checks history: two earlier orders to the same address, both undisputed, with the same email. It writes politely and asks if someone else in the household placed it. A teenager had. The cardholder withdraws. Fix for next time: nothing to change in the store, but the history made the case.

Case 3: the shortcut to a refund. A customer in Winnipeg buys a C$140 jacket, decides on a different colour and, instead of asking for a return, opens a dispute for fraud. The store has the delivery confirmation, the customer's reply about the jacket's fit, and an IP address that matches the billing country. It files a full response and wins, though the decision takes weeks. Fix for next time: make the return path easier to find, so customers choose it first.

Case	Cause	Evidence that mattered	Prevention
1	Name mismatch	Receipt, product details, customer reply	Matching statement name
2	Household use	Past orders, matching address	None needed
3	Return avoidance	Delivery record, customer message, IP match	Easy returns

Notice that friendly fraud in Canada is rarely about a villain. Two of the three involve honest mistakes, and the third involves a customer who wanted something the store could have offered.

How should your support team talk about friendly fraud?

Support staff meet these customers first, often before a dispute is filed. Give them a script, so the response is polite, consistent and does not accuse.

Support script: customer says "I don't recognize this charge"

1. Thank them for flagging it. Do not say "that's not fraud".
2. Give the order date, amount, items and delivery city.
3. Explain the statement name: "Charges from us appear as [name]."
4. Ask: "Does this match something you or someone in your household bought?"
5. If yes: offer a copy of the receipt and thank them.
6. If no: offer to look into it and escalate to the owner.
7. If they mention the bank: say, "If you've already contacted your bank
   and it was a mistake, you can ask them to withdraw the dispute."
8. Save the conversation to the order notes.

Two things matter in this script. Never tell a customer to withdraw if they say the order was truly not theirs, since that could be real fraud, and refunding or dropping evidence is the wrong response. And save every conversation, because a reply from the customer is direct acknowledgment that you can attach to a response.

Should friendly fraud inquiries be handled differently from chargebacks?

Yes, because an inquiry gives you more options. An inquiry takes no money from your balance when it opens, and Shopify says its review can run 65 to 75 days or longer. A full refund on an inquiry stops a chargeback from following, while a partial refund does not. After a chargeback begins you cannot refund, and the route is a withdrawal letter, which can take 30 to 90 days.

If an inquiry appears and your records show a repeat customer who received the goods, the cheapest answer may be to reply with the receipt and delivery record and see whether it ends there. If the signals are weak or the order is small, a full refund can stop the process for the cost of the goods. In either case, act the day you see it.

Stage	Friendly fraud options
Inquiry, strong history	Reply with receipt and delivery proof
Inquiry, weak history, small order	Full refund may be the cheapest end
Chargeback, strong history	Fight, ask for a withdrawal letter
Chargeback, weak history, small order	Cost sheet decides

How do you track repeat disputers without breaking privacy?

Some customers file more than one dispute. A simple internal note on the order or customer record helps you spot a pattern. Keep it factual: the date, the reason and the outcome. Do not publish names or share lists with other businesses.

Internal note format (keep it factual)

[Date] Dispute opened on order #[number], reason [Fraudulent/Unrecognized].
Customer history: [number] prior orders, [number] disputes.
Contacted customer on [date]; reply: [summary or none].
Outcome: [won / lost / withdrawn / accepted].

Customer records contain personal information. Keep access narrow, store only what you need and know where it lives. This is general information, not legal advice, and a lawyer can speak to your obligations. If a customer has disputed several genuine orders, you may decide to ask for extra verification on their next order. Whatever you decide, apply it consistently and fairly.

How does ChargeFix help with friendly fraud?

ChargeFix is built for Shopify Payments disputes. For friendly fraud it pulls the records that matter into one case before the clock runs out.

1. Dispute fetched. ChargeFix fetches the chargeback when it opens.
2. Records read. It reads the order, payment details, addresses, tracking and delivery status from your store.
3. Evidence scored. Each item is checked, with a fix beside every gap.
4. Plain verdict. Worth fighting, improve the evidence first or weak evidence.
5. Letter from facts. The response is drafted only from verified facts, so it never invents a delivery date.
6. You approve. Manual mode is the default. Auto mode, on Starter plans and above, is off until you turn it on and confirm, and its default rule covers product not received with delivery confirmed. Fraud-type disputes are saved as drafts for you to review.

You add what only you have: customer emails, the bank's letter, signature records. ChargeFix cannot promise a win, and it works with Shopify Payments disputes only. It stores minimal data: case ID, amount, reason, status, dates and shop settings, not customer names, addresses, emails or letters. The free plan covers 2 filings a month, and every paid plan starts with a 14 day trial.

What does a dated plan for a friendly fraud dispute look like?

This plan assumes the shortest window, 7 days.

Day	What you do	Done when
Day 0	Dispute opens. Note reason, amount, due date.	You know the deadline
Day 1	Pull history, IP, addresses, delivery record	Signal sheet is filled
Day 2	Email the customer	Message sent and saved
Day 3	If they reply, ask for the bank's letter	Reply or silence noted
Day 4	Decide to fight or fold	A decision is written down
Day 5	Build the response in Shopify's evidence order	Every claim points to a file
Day 6	File	Confirmation shows in admin
Day 7	Spare day	Nothing left to do
Up to 75 days later	Decision arrives	Note the cause for your audit

What is different about friendly fraud in Canada?

Most guides on this topic are written for the United States. Several points change for a Canadian store on Shopify Payments.

Topic	What applies in Canada	What to do
Shopify Protect	US stores only	Do not count on it for fraud losses
Canadian friendly fraud rate	Not published by any source we reviewed	Measure your own
Fee currency	C$15 or US$15 by payout currency	Cost disputes in your payout currency
Customer data	Dispute files hold personal information	Share only what is needed
Complaints	Code of Conduct for the Credit and Debit Card Industry, supervised by FCAC	Raise a complaint with your processor first
Benchmarks	Mostly US or global	Compare yourself with your own history

Shopify Protect does not apply. It covers eligible fraud and unrecognized chargebacks on Shop Pay orders, but only for US stores, and Shopify says it is not insurance. A Canadian store carries friendly fraud losses itself.

Customer records. Keeping history helps your defence. It also means holding personal information, so keep access narrow and know where the data lives. This is general information, not legal advice.

Where to complain. Shopify Payments (Canada) acknowledges a complaint within 5 business days and gives a final written decision within 45 days. The Financial Consumer Agency of Canada supervises the Code but is not a dispute resolution agency for individual cases, so it will not reverse a chargeback.

What are the 10 mistakes to avoid with friendly fraud in Canada?

1. Accusing the customer. State records, not suspicions.
2. Skipping the customer contact. Many disputes end with one polite email.
3. Accepting a withdrawal promise without the letter. Shopify needs the bank's letter on letterhead.
4. Not filing because the customer agreed. Still submit evidence.
5. Deleting order history. Past undisputed orders are your best evidence.
6. Forgetting delivery proof. Save the confirmation at delivery.
7. Quoting a Canadian friendly fraud rate. No verified source exists. Measure your own.
8. Fighting every case. Use the cost sheet.
9. Counting a win as a clean slate. It still counts in your rate.
10. Never following up after delivery. A reply is free acknowledgment.

FAQs

What is friendly fraud?

It is a dispute from a cardholder who made the purchase, or whose household did, and tells the bank it was unauthorized. Causes include forgotten purchases, household use, buyer regret and deliberate abuse. Visa's estimate of roughly 20% comes via chargeback.io, and it is a global figure.

How is friendly fraud different from fraud?

True fraud involves a criminal using a stolen card, with goods sent to the criminal. Friendly fraud involves a real cardholder or household, with goods delivered to their address. The evidence differs: history, matching details, delivery and messages help against friendly fraud, while order screening matters for true fraud.

What does Shopify say to do about it?

Shopify says to contact the customer first. If they agree the order was valid, they can ask their bank to drop it, and you still submit evidence. If you believe the customer is wrong, Shopify lists the same core records: fulfillment date and time, billing details, IP address and country, and shipping and tracking.

What is a withdrawal letter?

It is an official letter from the customer's bank confirming that the customer is withdrawing the dispute. Shopify says it must be on bank letterhead, show the case number and confirm the charge details and cancellation. A screenshot of a bank statement is not enough. Submit it with your evidence.

How often do merchants win friendly fraud disputes?

Win rates vary by dispute type. One global dataset, from Datos Insights via chargeback.io, puts fraud coded disputes at 17%, while US merchants win about 54% of those they contest. We have no verified Canadian friendly fraud win rate, so track your own results with the audit in this series.

Can I stop friendly fraud completely?

No. You can lower it with recognizable statement names, clear emails, easy returns, fast support and saved delivery proof. A dispute can still arrive, and winning does not remove it from your rate. Prevention reduces the count, and good evidence protects the money on the cases that remain.

Does Shopify Protect cover friendly fraud?

No. Shopify Protect covers only fraud and unrecognized reasons on eligible Shop Pay orders, applies to US stores only and is not insurance, according to Shopify. A Canadian store is not eligible. Your own records and response are what protect you.

What is Visa Compelling Evidence 3.0?

It is a Visa rule for reason code 10.4 fraud disputes. It asks for two earlier undisputed transactions, 120 to 364 days old, with matching customer data such as the IP address or device ID. It does not guarantee a win.

Should I fight every friendly fraud dispute?

No. Use the cost sheet: compare your honest chance of winning times the total loss against the time you would spend. Fight when you have history, matching details and delivery proof. Consider folding on small orders with no evidence, and note the cause for your audit.

How does ChargeFix help?

ChargeFix fetches each Shopify Payments dispute, reads the order, addresses, tracking and delivery status, scores the evidence and drafts the letter from verified facts. You add customer emails and the bank's letters. It cannot promise a win, and it saves fraud-type disputes as drafts for your review.

Start free trial with ChargeFix

You now have the signals, the customer email and a response template for friendly fraud in Canada. What most stores lack is the time to pull the records and write a clear case before the deadline. ChargeFix reads your Shopify order data, shows what is missing, writes the letter from verified facts and files when you approve it.

The free plan includes 2 filings every month, and every paid plan starts with a 14 day free trial. There is no cut of what you win, and no contract.

Ready to answer friendly fraud in Canada with evidence instead of guesswork? Start free trial

Sources

• Shopify Help Center, Reasons for a chargeback or inquiry
• Shopify Help Center, Resolving a chargeback or inquiry
• Shopify Help Center, Responding to chargebacks and inquiries
• Shopify Help Center, Considerations for using Shopify Protect
• Shopify Help Center, Network dispute resolution programs
• Shopify Payments (Canada), Code of Conduct complaint handling
• Stripe, Visa Compelling Evidence 3.0 disputes
• chargeback.io, Chargeback statistics
• Retail Insider, Fraud is costing Canadian merchants more than they may realize
• ChargeFix, chargefix.pro