Shopify has no built-in "block customer" button. If someone keeps placing fraudulent orders, filing chargebacks, or abusing your return policy, you need a workaround. Here are the options — from manual tagging to fully automated blocking rules.
The short answer: Out of the box, Shopify only lets you disable a customer's account — it does not stop them from checking out as a guest. To actually block orders you need Shopify Flow (Plus only) or a fraud prevention app that cancels or blocks matching orders automatically.
Why You Can't Block Customers Natively
Shopify checkout is intentionally low-friction: anyone with a valid payment method can place an order, even without an account. Disabling a customer account in the admin only prevents that person from logging in — they can simply check out as a guest with the same email, or a new one.
That means "blocking" a customer really means: detecting their orders by stable signals (email, name, address, phone, IP) and cancelling or holding those orders before fulfillment.
Option 1: Manual Tagging and Review
The zero-cost approach: tag the customer (for example with "blocked" or "fraud") and check new orders against tagged customers before fulfilling.
✅ Pros:
- Free and takes seconds to set up
- Works on every Shopify plan
🚨 Cons:
- Nothing is actually blocked — orders still come in
- Relies on someone remembering to check every order
- Fails the moment the customer uses a new email
Option 2: Shopify Flow (Shopify Plus Only)
On Shopify Plus, you can build a Flow automation: when an order is created by a customer tagged "blocked", cancel it automatically. This works, but it is limited to exact customer matches, requires a Plus plan, and every condition change means editing the workflow by hand.
Option 3: Automated Blocking Rules (Any Plan)
A fraud prevention app like FraudFalcon watches every incoming order and applies your blocking rules instantly — no Plus plan required. Because fraudsters rotate emails, the key is to block on several stable signals at once:
Signals worth blocking on:
- Email address (and disposable email domains in general)
- Full name
- Shipping address or ZIP code
- Phone number
- IP address
How it works in FraudFalcon:
- Open the fraudulent order in your Shopify admin
- Click "More Actions" → "Create FraudFalcon Rule" — the customer's email, name, and address are pre-filled as conditions
- Choose the action: cancel the order automatically, tag it for review, or send yourself a notification
- Activate the rule — it now runs on every new order
From that moment, any order matching the blocked customer's details is handled automatically, even if they check out as a guest or slightly change their email.
Best Practices When Blocking Customers
✅ Do this:
- Block multiple signals, not just the email
- Cancel with reason "Fraudulent" and refund in full
- Review blocked-order logs occasionally for false positives
🚨 Avoid this:
- Blocking whole countries out of frustration
- Relying on IP alone — VPNs make it unreliable
- Fulfilling "one last order" from a known bad actor
🎯 Key Takeaways
- ✓ Shopify cannot block customers natively — disabling an account does not stop guest checkout
- ✓ Manual tagging documents the problem but prevents nothing
- ✓ Automated rules that match email, name, address, and phone are the only reliable block
- ✓ Block on several signals at once so a new email address does not defeat the rule