runbookify
← All plans
Order Management & Fulfillment / Order Exceptions, Holds & Fraud

Order Fraud & Risk Screening Triage: Stop Risky Orders Before They Ship

Score every order against your own risk rules — billing/shipping mismatch, big first orders, rush-to-new-address, velocity — queue the flagged ones, and let a reviewer clear or cancel each one before it ever reaches the warehouse.

IntermediateA weekendBuilds onNext.jsSupabaseResend
What you'll build

A web tool where you import an orders CSV, AI scores each order against your risk rules and queues the flagged ones, a reviewer clears or cancels every flagged order with a reason, and the tool produces a cleared-to-ship list plus a complete audit log — and exports cleared orders as a CSV in the exact columns your fulfillment system expects.

Gated download

Enter your email — the plan downloads instantly and a copy lands in your inbox.

By submitting your email you'll also receive the weekly runbookify newsletter. You can unsubscribe at any time.

Before you start

  • A Supabase account (free)
  • A Vercel account (free)
  • A Resend account (free)
  • An orders CSV export
  • Your risk-rule thresholds (or a willingness to set them in the interview)
  • Claude Code or any AI coding agent

The problem this kills

Fraud and risky orders rarely look obvious one at a time. A big first order from a brand-new customer, billing in one state and shipping to another, overnight shipping to an address you've never seen, three orders from the same card in ten minutes — each one slips through because the person packing boxes isn't a fraud analyst, and the fraud analyst isn't watching the queue at 6pm on a Friday.

So the risky ones ship. Then come the chargebacks, the reshipments, the "why did we send $4,000 of product to a freight forwarder" conversations. The rules to catch these live in someone's head or a stale wiki page, and they only get applied when someone happens to feel suspicious.

This tool turns those gut-feel rules into something the system enforces on every order, automatically, before fulfillment — and still keeps a human firmly in charge of every cancel-or-clear decision.

What you'll build

A small internal web app where:

  • You import an orders CSV (or connect a Sheet) and a risk-rule config.
  • The tool scores each order against your rules — billing/shipping mismatch, large first order, rush shipping to a new address, order velocity, and any others you define in the interview.
  • Flagged orders land in a review queue with their risk score and the exact reasons they tripped.
  • A reviewer (risk, a CSR, or finance) opens each flagged order and clears it or cancels it, with a required reason.
  • The tool produces a cleared-to-ship list, a canceled list, and a complete audit log of who decided what and when.
  • Cleared orders export as a CSV in the precise columns your fulfillment system or 3PL expects — so this works today, even with no API.

What's inside the Implementation Plan

  • It starts by interviewing you about your business. Before writing a line of code, the plan has the AI agent ask you about your current screening process, the columns and naming in your orders export, your real risk thresholds, your typical and peak order volumes, and your messy edge cases. It reflects a short tailored spec back to you and waits for your thumbs-up — so you get a tool shaped around your orders and your rules, not a generic template.
  • A step-by-step build, each step ending in a ready-to-paste prompt for your AI agent.
  • A tunable risk-rule engine you can adjust without touching code.
  • A reviewer queue with a clear/cancel gate and required reasons.
  • A complete data model, validations, and a duplicate guard keyed on order ID.
  • A verification checklist and a no-API CSV fallback path so it's fully buildable in a weekend.

The governance it includes (this is the point)

This isn't a script that quietly cancels orders. It's a controlled, auditable workflow:

  • Login so only your team can use the tool.
  • Row-level security so a user only ever sees their own organization's orders.
  • A complete audit trail — every score, every clear, every cancel, with the person and timestamp.
  • A hard human-in-the-loop gate — the AI scores and flags, but nothing is marked cleared-to-ship or canceled until a person reviews and approves. The AI never decides on its own.
  • Duplicate guards keyed on order ID, so the same order can't be screened or pushed to fulfillment twice.

Who it's for

Risk and fraud analysts, customer service reps who hold and release orders, and finance teams watching for chargebacks — anyone who needs risky orders to stop at a checkpoint instead of sailing straight to the warehouse.

You've got this. Open the Implementation Plan, paste the first prompt into your AI agent, and let it interview you about your orders.

Gated download

Enter your email — the plan downloads instantly and a copy lands in your inbox.

By submitting your email you'll also receive the weekly runbookify newsletter. You can unsubscribe at any time.