Manually Capture Funds for Risky Shopify Orders

When an order is created in Shopify (through online checkout, POS, admin, or API), this trigger activates the workflow and captures complete order data including order ID, customer email, order number, payment details, and shipping information. The workflow runs for every new order placed in your store. No configuration is required—it's pre-connected to your Shopify store and automatically monitors order creation.

Fraud prevention context: Shopify automatically authorizes payment but doesn't capture funds immediately for orders requiring manual review. This workflow intercepts those orders before capture occurs.

This step retrieves shop information from Shopify, specifically the myshopify domain which is used to build the order admin URL format "https://[domain]/admin/orders/[order_id]" that appears in the approval notification.

This step retrieves Shopify's fraud analysis for the order using the order ID. Shopify analyzes multiple risk indicators including:

1. Address Verification System (AVS) results
2. CVV verification status
3. Billing vs shipping address comparison
4. Order velocity (multiple orders from same customer/IP)
5. Unusual purchasing patterns
6. High-risk geolocation

The analysis returns a recommendation field with values: "ACCEPT" (low risk, safe to fulfill), "INVESTIGATE" (medium risk, manual review recommended), or "CANCEL" (high risk, likely fraud). This recommendation is used in the next step's filter.

Shopify fraud analysis: This uses Shopify's built-in fraud detection, not a third-party service. The analysis runs automatically on all orders and is available immediately after order creation.

This filter checks if the fraud analysis recommendation equals "INVESTIGATE" OR "CANCEL". If true (order is risky), the workflow proceeds to send an approval request. If false (recommendation is "ACCEPT"), the workflow stops here and the order processes normally through Shopify. The OR logic ensures both medium-risk and high-risk orders receive manual review.

Risk level breakdown:

1. ACCEPT: Low risk, no review needed (filtered out)
2. INVESTIGATE: Medium risk, manual review recommended (proceeds to approval)
3. CANCEL: High risk, likely fraud (proceeds to approval)

This approval step sends a notification and presents three options. The approval message includes:

1. Order number
2. Customer email
3. Direct link to the order in Shopify admin

Approval options:

1. Capture Payment: Proceed with payment capture and fulfill the order
2. Void: Cancel the order and void the authorization (refunds customer)
3. Ignore: Take no action (order remains in authorized state for manual handling later)

The selected option is returned as the approval field value ("capture", "void", or ignored if dismissed). You can review the order details in Shopify admin using the provided link before making your decision, checking customer history, verifying shipping address, or contacting the customer.

Where approvals appear: Approval notifications appear in the MESA interface and can be configured to send to email for team visibility.

This step fetches all transactions for the order. When orders are created with payment authorization but not immediately captured, Shopify creates an "authorization" transaction. This step retrieves that authorization transaction which contains the transaction ID and authorized amount needed for either capturing payment or voiding the authorization. The first transaction in the array is typically the authorization.

Transaction types in Shopify:

1. Authorization: Payment method verified, funds reserved
2. Capture: Funds transferred from customer to merchant
3. Void: Authorization cancelled, funds released back to customer
4. Refund: Captured funds returned to customer

This filter checks if the first transaction's kind equals "authorization". If true, the authorization exists and can be captured or voided. If false, the transaction is in a different state (already captured, voided, or refunded) and the workflow shouldn't attempt further action. This safety check prevents duplicate captures or errors.

This step creates a capture transaction when you selected "Capture Payment" in the approval. It includes:

1. amount: The full authorized amount from the authorization transaction
2. kind: "capture" (indicates this is a payment capture)
3. parent_id: The authorization transaction ID (links capture to original authorization)

The capture transaction completes the payment process, moving funds from authorization hold to your account. After capture, the order can be fulfilled normally and the customer is officially charged.

Capture timing: Payment authorizations typically expire after 7 days. If you don't capture within that window, you'll need to request a new authorization from the customer.

This filter checks if the approval field equals "void". If true (you chose to void), the workflow proceeds to cancel the order. If false (you chose capture or ignore), this path is skipped. This conditional logic ensures order cancellation only occurs when explicitly requested.

This step cancels the order in Shopify, which automatically voids the authorization transaction. Canceling releases the payment hold, returns reserved funds to the customer, updates order status to "cancelled", and prevents fulfillment. The customer is not charged, and inventory is released back to available stock.

Order cancellation effects:

1. Payment authorization voided (no charge to customer)
2. Inventory returned to available stock
3. Order status updated to "cancelled"
4. Fulfillment prevented
5. Customer notification sent (if enabled in Shopify settings)