Click and collect chargebacks on Shopify: how UK stores prove an order was collected

A customer orders a £240 coat online on Friday, picks click and collect at checkout, and a member of your team hands it over on Saturday morning. Three weeks later the payment is disputed as "product not received". Your till did not print a receipt, nobody wrote down who collected it, and the only trace is a status on the order that says "Fulfilled". Click and collect feels like the safest way to sell, because the goods never leave your hands. For dispute purposes, it is one of the easiest to lose.

Click and collect chargebacks happen when a customer who ordered online for collection later tells their bank they never received the order, did not authorise the payment, or that someone else collected it. A bank has no tracking scan to look at, so it relies on whatever you can show of the handover: a record of who collected, when, against what proof. The stores that win keep a simple handover log, ask for a collection code or photo ID, and send a dated "ready for pickup" and "picked up" email. This guide shows the records, the wording and a four-week plan.

This guide is for you if:

• You run a UK Shopify store with a shop, studio, stockroom or pop-up where customers collect online orders.
• You have had, or fear, a dispute on an order that was collected, and you are not sure what you could show.
• You want a handover routine that takes under a minute per order and holds up if a bank asks questions.

Last updated: 22 October 2026. Written by the ChargeFix team. Reviewed against sources on 22 October 2026. General information, not legal advice.

Disclosure. ChargeFix is a tool for responding to Shopify Payments disputes, so I have an interest in disputes being winnable. Shopify's own pages leave several click and collect questions open, and I say where. The stores and numbers are made up to show the method.

The 30-second answer (TL;DR)

• Click and collect has no courier scan, so the handover is your only proof. If you do not create a record, you do not have one.
• Shopify sends a "Ready for pickup" email when you mark an order ready, and you can send a "Picked up by customer" email afterwards. Marking the order picked up is Shopify's record of collection. Its pages do not mention a timestamp, a note field or a log of who handed it over.
• Add your own layer: a collection code or ID check, a signed or initialled handover log, and a note on the order.
• Keep the records for the dispute window, and file them against the order number.
• A routine of under a minute per order is enough. The aim is a consistent record, not paperwork.

Do this today (10 minutes):

1. Open the last five collected orders in Shopify admin.
2. For each one, write down what you could show a bank: who collected, when, and what proof they gave.
3. If the answer is "nothing", start the handover log below on your next collection.

From order to collection to dispute

Stage	What happens	What you can record
Order	Customer chooses a pickup location at checkout	Order confirmation, pickup location and time estimate
Ready	You mark the order ready message	"Ready for pickup" email and its date
Handover	Customer or someone on their behalf collects	Code or ID check, name, time, initials
Picked up	You mark the order picked up	Status change and optional confirmation email
Dispute	Customer claims non-receipt or fraud	Your handover record and emails

Why do click and collect orders get disputed?

Disputes on click and collect orders follow a few patterns, and each one has a different weakness in your records.

Claim	What is really going on	Weak spot
"I never received it"	The customer forgot, someone else collected, or the claim is false	No proof of who collected
"I didn't make this order"	Stolen card used on a collection order	Weak identity checks at handover
"Someone else collected it"	A courier, friend or relative took it, or a fraudster did	No named collector, no code
"I collected it but it was wrong"	A genuine quality or item dispute	No photo or sign-off at handover
"I cancelled"	Order changed after payment	No record of the cancellation reply

Click and collect looks safe because there is no delivery to go wrong. The risk is different: fraudsters like it too, because the goods are taken immediately, the card is gone before the dispute and the address problem disappears. A stolen card used for collection is a classic pattern. That is why the identity check at handover matters more than for delivered orders.

There is also a plain-human version. A customer places an order, never comes in, is charged, and later disputes it. In that case the evidence of a ready-to-collect email and uncollected goods on your shelf matters, and so does your policy on uncollected orders. Our guide to item not received disputes explains how banks treat that reason.

What does Shopify record for a click and collect order?

Less than you might hope. Here is what Shopify's own help pages say.

Step	What Shopify's pages say
Customer chooses the pickup location at checkout	They see only locations in their country, and the processing time you set is displayed
You mark the order ready	A "Ready for pickup" email goes to the customer; you can view or resend it from the order timeline
Staff action in POS	Tap Ready for pickup, then optionally print a pickup slip with a QR code, then tap Send notification. Staff need the "Fulfill shipping and pickup orders" permission
Customer collects	You mark the order as picked up, which marks it fulfilled
Confirmation	You can optionally email or text a pickup confirmation

Three gaps matter for disputes. Shopify's pages do not say who is allowed to collect an order, whether ID or a confirmation code is required, or how long orders are held. The POS page is silent on a collection timestamp, a staff note field and any record of which staff member marked an order ready or picked up. The only record the pages describe is the status change to Fulfilled. I could not confirm from those pages what the order timeline stores beyond what they state, so open a collected order in your own admin and see what it shows.

The conclusion for click and collect is simple. Shopify gives you the skeleton: an order, a "Ready for pickup" email and a picked-up status. Your handover routine supplies the evidence.

What should you record at the handover?

A good handover record answers four questions: who collected it, when, how you knew it was the right person, and what they collected. Here is what to capture.

Record	What it shows	How
Order number	Which order	Written or scanned
Collector's name	Who took it	Ask them to say it, check against the order
Proof of identity or code	That it was the right person	Collection code, photo ID, or the card used
Date and time	When	Written by staff
What was handed over	The goods	Item count or a tick against the order lines
Staff initials	Who handed it over	Written
Customer sign-off	They acknowledged receipt	A signature or initials
Optional photo	The goods or the handover	Only if the customer agrees

Keep it to what a busy shop can do in under a minute. For click and collect, a paper log or a shared spreadsheet is enough. The point is a consistent entry for every order, filed against the order number.

Be careful with ID. Asking for ID and noting that you saw it is common practice, but copying or storing ID images brings data protection duties. The ICO's guidance on UK GDPR applies to any personal data you keep, so note "ID seen: yes" and the first name, not a scan, unless you have a reason and a lawful basis to keep more. If in doubt, check the ICO's guidance or ask an adviser.

Here is a log you can copy into a sheet.

Order # | Date and time | Collected by (name) | Proof seen (code / ID / card) | Items handed over | Staff initials | Customer initials | Notes

For a staff script, keep it friendly and short: "Hello, can I take the order number or the code from your email? Thank you. Could I also see ID, just to protect your order?" Most customers expect it.

Should you use a collection code or photo ID?

Both work, and together they are strongest. They solve different problems.

Method	Strength	Weakness
Collection code in the email	Quick, tied to the customer's email address	Anyone with the email can use it
Photo ID	Ties the collector to a name	Name may differ from the cardholder; storing it has data protection duties
Card used to pay	Strongest tie to the payer	Not always practical, some customers use a different card or a wallet
Order number only	Fast	Weakest; anyone can read it out

A code is a single point of failure if the order was placed with a stolen card and email, but it still shows the person collecting had access to the confirmation. Photo ID shows the collector's name, which you can compare with the billing name. Neither proves the cardholder collected. They give a bank something specific to weigh, and they discourage fraudsters who prefer easy targets.

For higher-value orders, choose a stricter rule. For example: orders over £150 need ID and the code, orders under that need the code or the order number and a name. Write the rule down and apply it every time, because a rule you apply unevenly is hard to defend.

What emails should you send for click and collect?

For click and collect, emails create dated evidence of what the customer was told. Shopify's help pages say a "Ready for pickup" email is sent when you mark an order ready, that you can view or resend it from the order timeline, that pickup instructions you enter in a location's notification section replace the email body in the template, and that you can optionally send a "Picked up by customer" confirmation afterwards.

For click and collect, use all three: the order confirmation, the ready message and the picked-up confirmation. Our guide to order confirmation and shipping emails covers the first.

Here is a ready message.

Subject: Order [order number] is ready to collect

Hello [first name],

Your order is ready at [pickup location].

Address: [full address]
Opening hours: [hours]
Please bring: your collection code [code] and photo ID.
Someone else collecting for you? Reply to this email with their name before they come, and ask them to bring the code and their own ID.

We will hold your order until [date]. After that we will contact you about a refund or re-delivery.

Questions? Reply to this email or call [phone].

[Store name]

And the picked-up confirmation.

Subject: Order [order number] collected

Hello [first name],

This confirms your order [order number] was collected from [pickup location] on [date] at [time] by [name of collector].

If anything is wrong, reply to this email within [x] days and we will put it right.

[Store name]

The second email does two jobs: it gives the customer a chance to say "that was not me" on the day, and it gives you a dated record if they say it later. Keep the wording factual and only name the collector if you recorded the name.

What if someone else collects the order?

It happens often with click and collect, so decide your rule in advance. Gifts, parents collecting for adult children, couriers sent by businesses, and fraudsters all look alike at the counter.

Situation	Suggested rule
Customer asks in advance to send someone	Written permission by reply email, with the collector's name
A person arrives with the code and no notice	Call or email the customer before handing over if the order is over your threshold
A courier or business collects	Their company name and order reference, recorded
The customer's name differs from the card	Treat as higher risk; ask for ID and note it

If the customer later claims they did not authorise a third party, your record of their written permission is your best evidence. Without it, you are relying on the code alone.

How do you handle click and collect orders nobody collects?

Uncollected orders create the awkward dispute: the customer paid, never came, and then disputes the charge. Decide your uncollected policy before you need it. Say how long you hold goods, what you do afterwards (refund, re-delivery or restock) and when the customer is told. Put it in the order confirmation and the ready message.

If the customer does not collect, the paper trail is what protects you: the ready email, a reminder email and your record that the goods were held. Then you can refund proactively if the policy says so, which is far cheaper than a dispute. Remember what a dispute costs: the amount and a £10 fee leave your balance at once, and the fee returns only on a win. A £240 order that goes wrong costs £250 at once.

How do you respond if a click and collect order is disputed?

Respond to a click and collect dispute with a short, factual package. Shopify's help pages say the response deadline is usually 7 to 21 days, that if you add no evidence it submits what it has collected on the due date, and that once you submit early you cannot edit. So collect everything first.

Item	What to include
The order	Items, total, billing details and the pickup location
The emails	Order confirmation, ready message and picked-up confirmation with dates
The handover log entry	Collector name, time, proof seen, initials
Policy	Your collection and uncollected-order policy, as shown at checkout
Messages	Any emails or calls with the customer
Payment checks	AVS and CVV results from the order, if available

Write the narrative in plain words. For example: "The customer ordered on [date] for collection from [location]. A ready-for-pickup email was sent on [date]. The order was collected on [date] at [time] by [name], who gave the collection code and showed ID. Attached are the emails and our handover record." Leave out anything you cannot show. Our guide to responding to a Shopify chargeback gives the wider structure.

What does a click and collect fraud case look like?

Here is a made-up case to show how the records play out. It is an illustration, not a real merchant.

A watch shop receives a £780 order on a Thursday evening for click and collect, paid with a card in the name "R. Patel", with an email address created that day. The order confirmation goes out within a minute. On Friday at 10:40 a man arrives, gives the order number and says he is collecting for a friend. The staff member remembers the rule for orders over £500: call the customer first. The number on the order goes to voicemail, and the shop declines to hand it over and emails the customer. Nobody replies. After seven days the shop refunds the order under its uncollected policy.

Compare the other outcome. With no rule, the watch is handed over on the order number, and a month later the cardholder disputes the payment as fraud. The shop has a status of "Fulfilled", an order number and nothing else. It loses £780, pays a £10 fee, and the watch is gone.

	With a rule	Without a rule
At the counter	Call the customer, decline the handover	Hand over on the order number
Evidence	Email trail, a refund, the watch still in stock	A status on the order
Dispute	None	£780 plus £10 lost

The lesson is not that every collection needs a phone call. It is that a rule by value, applied consistently, turns a possible loss into a refund. Our 30-point chargeback audit includes checks for this kind of handover record.

What should a shift checklist for click and collect include?

Put this on the counter. It is the part of the routine staff actually use.

Step	Check
1	Find the order by number and read the name aloud
2	Ask for the collection code or ID, according to the order value
3	Compare the name to the order and note anything different
4	Hand over the items and tick them off
5	Ask the customer to initial the handover log
6	Mark the order picked up in Shopify
7	Send the picked-up confirmation
8	File the log entry against the order number

At the end of the day, one person should check that every order marked picked up has a log entry and that every log entry matches an order. A two-minute reconciliation catches gaps while the memory is fresh, which is much easier than rebuilding a record three weeks later when a bank asks.

For pop-ups and markets that offer click and collect, the same routine applies, with one change: you may not have a till or a signal. Carry a printed order list and the paper log, and enter the collections into Shopify at the end of the day. A click and collect handover logged on paper that day is far better than none.

What is a dated plan to make click and collect dispute-ready?

This plan starts on Monday 26 October 2026 and takes about four weeks.

Date	Task	Time
Mon 26 Oct	Open five collected orders and note what you could show	20 minutes
Tue 27 Oct	Decide your proof rule by order value: code, ID, or both	20 minutes
Wed 28 Oct	Create the handover log sheet and print a paper copy for the counter	30 minutes
Thu 29 Oct	Rewrite the "Ready for pickup" instructions in each location's notification settings	30 minutes
Fri 30 Oct	Test: place an order, mark it ready, check the email	20 minutes
Mon 2 Nov	Brief staff with the script and the rule	30 minutes
Wed 4 Nov	Switch on the optional picked-up confirmation	15 minutes
Mon 9 Nov	Write the uncollected-order policy and add it to the confirmation	30 minutes
Mon 16 Nov	Check ten logged handovers for gaps	30 minutes
Fri 20 Nov	Review disputes on collected orders and adjust the rule	30 minutes

Keep the click and collect logs for as long as disputes on those orders are possible, and longer if your accountant needs them. I could not verify a single time limit for UK card disputes, so keep records for a sensible period and delete personal data you no longer need.

What does this look like for three UK stores?

These stores are made up to show how the rules differ.

Marlow Books. It sells books at about £16 an order, with lots of collections. Disputes are rare and small. A simple rule works: the order number and the customer's name, logged in a notebook. A £16 loss is not worth heavy process.

Calder Bikes. It sells bikes at £900 and above. Every collection needs photo ID matching the billing name and the code, a signed handover, and a photo of the bike with the customer's agreement. One lost dispute is £910. The extra minute is cheap.

Thistle Jewellers. It sells rings and watches at £300 to £2,000 and takes many click and collect orders. Because stolen cards are a known risk for small valuable goods, it holds orders over £500 until it has called the customer, and keeps a ID note on every collection. It also asks for the card used when possible.

What is different for UK merchants?

• Fee and timing. On Shopify Payments in the UK, a dispute costs the amount plus a £10 fee at once. The fee is returned only on a win, and the response deadline is usually 7 to 21 days.
• Data protection. UK GDPR applies to any ID details you keep. Note that ID was seen, and avoid storing copies unless you need them.
• Shopify Protect. It is for US stores only, so UK stores have no free guarantee for fraud on collected orders.
• Shops and staff. Staff turnover is high in many UK shops, so the routine must be simple enough that a new person can follow it on day one.
• Consumer rights. Customers have rights to return goods in many cases. Your collection routine does not replace your returns policy.

What I could not verify: what the order timeline stores for pickup orders beyond Shopify's stated emails and status, whether Shopify's POS records the staff member who marked an order picked up, how banks weigh a handover log against a customer's denial, and any UK time limit for these disputes. Check your own admin and take advice on ID handling.

What are the common mistakes with click and collect?

1. Treating click and collect as safe. Without a record you have nothing to show.
2. Handing over on the order number alone. Anyone can read it out.
3. No written rule for third-party collections. Unclear cases become disputes.
4. Storing ID copies without need. Note that ID was seen, and do not keep scans by default.
5. Skipping the picked-up confirmation. It is the dated record that you handed over.
6. No policy for uncollected orders. Decide how long you hold goods.
7. Leaving staff unbriefed. A script and a one-page rule fix most gaps.
8. Losing the log. File every entry against the order number.
9. Ignoring high-value orders. A stricter rule for higher values pays for itself.
10. Waiting for a click and collect dispute to learn what you can show. Run the test on past orders now.

Frequently asked questions

Why do click and collect orders get chargebacks?

Because there is no courier scan, a customer can claim they never received the order, did not authorise the payment or that someone else collected it. Fraudsters also favour collection because the goods are taken at once. Your handover record is the only proof of who collected and when.

What proof do I need for a click and collect dispute?

Show the order, the dated "ready message" and "picked up" emails, and a click and collect handover record with the collector's name, the time, the proof they gave and staff initials. Add your collection policy and any messages with the customer. The more specific the handover record, the stronger the response.

Does Shopify record who collected a pickup order?

Shopify's help pages say marking an order picked up is the record of collection and that it marks the order fulfilled. They mention no collection timestamp, no staff note field and no record of who marked the order. Check your own admin, and keep your own handover log.

Should I ask for photo ID at collection?

It helps, especially on higher-value orders, because it ties a name to the handover. Record that ID was seen along with the name, and avoid keeping scans unless you have a lawful reason, as UK GDPR applies. A collection code alongside ID is stronger than either alone.

What if someone else collects the order?

Ask the customer to tell you in advance by reply email, with the collector's name, and keep that email. For a person who arrives without notice, contact the customer before handing over on higher-value orders. Without written permission, you are relying only on the collection code.

What should a ready for pickup email say?

The collection address and hours, what to bring such as the code and ID, how long you will hold the order, how to authorise someone else, and a contact route. Shopify sends a "Ready for pickup" email when you mark the order ready, and you can edit the instructions in the location's notification settings.

How long should I keep handover records?

Keep them for as long as a dispute on that order is possible, and longer if your accountant needs them. I could not verify a single UK time limit, so keep records for a sensible period and delete personal data that you no longer need.

Can I refuse to hand over an order?

Yes, if you cannot confirm the person is entitled to collect, and your policy should say so. Explain politely, offer to check with the customer by email, and note what happened. A refusal that protects against fraud is better than a handover that leads to a lost dispute.

What happens if a customer never collects?

Follow your uncollected-order policy: send a reminder, hold the goods for the stated period, then refund or re-deliver. Keep the ready and reminder emails. Refunding proactively is far cheaper than a dispute, which removes the amount and a £10 fee immediately and returns the fee only if you win.

Is click and collect less risky than delivery?

Not necessarily. You avoid delivery problems, but you take on identity and handover risk, and fraudsters like collection. With a simple routine of a code, a name, a log and a confirmation email, click and collect can be well defended. Without it, it is easy to lose.

Start free trial with ChargeFix

When a click and collect order is disputed on Shopify Payments, ChargeFix gathers the order, payment-check and email records you have, scores the evidence and drafts the response from your own data, never inventing facts. It cannot create a handover log you did not keep, so start the routine above. Manual review is the default, so nothing is filed until you approve it. Start free trial

Sources

• Setting up pickup in store for online orders, Shopify Help Center
• Local pickup for online orders in POS, Shopify Help Center
• Responding to chargebacks and inquiries, Shopify Help Center
• ChargeFix support page
• Stripe, Dispute evidence best practices: further reading on how to format convincing evidence
• Adyen, Manage disputes: further reading on how another payment provider handles disputes