Prevent bot purchases, fraudulent orders & unauthorized checkout (Checkout Lock – Shopify Plus)
Note: This feature is for Shopify Plus stores that have access to Checkout Lock inside B2B Lock (or a similar section name).
Goal Block suspicious or unauthorized checkouts using rules at the checkout level (not just at the catalog level).
When to use this recipe
You get many fake or risky orders.
You want only approved customers to complete checkout.
You need extra safeguards for certain products, markets, or IP ranges.
Step 0 – Before you start
Confirm your store is on Shopify Plus.
Make sure B2B Lock – Checkout lock is installed and visible in the app navigation.
Step 1 – Create a checkout lock rule
In the app, navigate to Checkout locks (or similar menu).
Click Add checkout lock (or Add rule depending on UI).
Name the rule:
Block unauthorized checkoutsorStop bot/fraud orders.
You’re now configuring checkout-level conditions, not just storefront visibility.
Step 2 – Define conditions for blocking checkout
Examples of useful patterns:
A. Only tagged customers can checkout
Condition: If the customer is not tagged with
wholesaleorapproved→ block checkout.Result: Only approved customers can complete orders.
B. Block specific products from checkout
Condition: If the cart contains specific products/collections AND customer is not tagged appropriately → block checkout.
Useful for restricted products or controlled items.
C. IP / location-based protection
Condition: Block checkout from specific IP ranges or restricted countries/regions if your UI supports this.
For each rule, define:
When the rule triggers (e.g., before payment step).
What combination of conditions means “block this order”.
Step 3 – Customize the blocked checkout message
When a checkout is blocked, the customer should see a clear explanation.
In the rule’s advanced or message settings:
Headline:
“We can’t complete this order”
Body examples:
“This checkout is only available for approved wholesale customers. Please log in with your wholesale account or contact us.”
“We’re unable to process orders from your region. If you believe this is a mistake, contact support.”
Include:
A link to contact support or request approval.
Any necessary compliance text (if blocking for legal reasons).
Click Save.
Test your checkout lock
Attempt a checkout as a customer who should be blocked:
Use a test customer or a normal retail profile.
Confirm the checkout displays your error message and does not proceed.
Attempt a checkout as an approved customer:
Confirm the order flows normally.
When to combine with other locks
Checkout Lock works best when combined with:
Catalog-level locks (hide products/collections from the wrong users).
Price/visibility rules (hide prices from guests or unapproved users).
Tag-based approval flows from your B2B apps.
Together, they give you a full stack of protection: From who can see what → to who can actually place an order.
Last updated
Was this helpful?