Your Fraud Rules Are About to Turn Away Good Buyers

Six fraud rules to review before peak season, and why false declines rarely show up in your reporting.

Most merchants tighten their fraud settings before Q4. That's a reasonable instinct. Fraud attempts tend to climb when volume does, and nobody wants a chargeback spike in January.

The catch is that legitimate holiday shopping looks a lot like fraud to rules that were tuned on normal traffic. Customers buy more, buy more often, buy for other people, and buy from places they don't usually shop. A rule set built for September will read a lot of December as risk.

Why False Declines Are Easy to Miss

A false decline is a legitimate order your fraud controls reject. When it happens, the customer rarely calls to complain. Most simply buy somewhere else, and some don't come back.

That's what makes false declines dangerous. Fraud losses show up in chargeback reports and get attention. Sales lost to false declines don't show up anywhere unless you go looking. Industry research has repeatedly found that the revenue merchants lose to false declines can exceed what they lose to fraud itself.

Six Rules to Review Before Peak

1. Velocity limits

Velocity rules flag customers who place several orders, or try several cards, in a short window. During peak, a shopper buying gifts for five people in one evening is normal. Check whether your thresholds were set on off-peak traffic, and whether they decline outright or route to review.

2. First-time customers

Peak season brings a wave of new buyers with no history with you. If your rules lean heavily on account age or purchase history, a large share of your best new customers will score as risky by default.

3. Ship-to vs. bill-to mismatch

Gifts ship to someone else's address. A mismatch between billing and shipping is a useful signal, but on its own it shouldn't decide the order. Look at whether your rules treat it as a verdict.

4. Order value caps

Holiday baskets run larger. A hard cap built around your average order value can turn away your highest-value customers at the point they're most ready to spend.

5. Cross-border cards and IP addresses

Travelers, expats and gift buyers abroad all trip geo rules. If you sell internationally, or want to, check whether a foreign card or an IP-to-billing mismatch is enough on its own to decline.

6. Manual review capacity

Many merchants route borderline orders to manual review. During peak, that queue grows. Find out what happens when your team can't keep up: do orders wait, get approved, or auto-decline after a set time? Staff for the queue, or adjust the rules that feed it, before it overflows.

Measure What Your Own Rules Decline

Not every decline is yours to fix. Issuers decline transactions for their own reasons, and that's a separate conversation with your processor. The declines your own fraud rules generate are the part you control.

Before peak, make sure you can see them separately: how many orders each rule declines, how many go to review, and how many of those reviewed orders turn out to be good. That's the baseline you need to tell whether a rule is protecting you or just costing you sales.

The Takeaway

Tightening fraud rules before peak isn't wrong. Tightening them without checking what they'll decline is. Fraud losses get reported. Sales lost to false declines usually don't, so the only way to know is to measure them.