Shopify checkout validation
Stop the orders you never wanted
OrderGate is a Shopify app that turns away buyers you have blocked during checkout — before the order exists, so there is nothing to refund, cancel, or restock.
Free for 2 exact-email or phone rules · Standard $9/month after a 7-day trial · cancel from inside the app
Founding 100: the first 100 stores on Standard pay half, $4.50/month, for as long as they keep it. 100 seats left.
Checkout, enforce mode
This email address can't be used for orders at this store.
What it does
- Blocked before an order existsRules run inside Shopify's own checkout validation function. A blocked buyer never becomes an order, so no transaction fee, no cancellation, and no restock.
- Rules shaped like the actual problem, with exceptionsBlock by exact email address, wildcard pattern such as *@tempmail.com, a whole domain including its subdomains, a list of domains as one rule, phone number, full name, street address, country, state or province, city, postal-code prefix, or customer tag, and an allow rule for the one good customer behind a blocked domain or country. Up to 1,500 rules.
- Watch before you enforceLog-only mode reports how many recent orders your rules would have stopped, so you switch blocking on already knowing what it will do. It is the default on install.
- Hide cash on delivery and free shipping from risky buyersA matching buyer can still check out, but payment methods named like cash on delivery — COD, kapıda ödeme — are hidden from them, and so are delivery options that cost nothing while a paid one exists. This works whether or not the store uses Shopify Payments.
- Works where Shopify's own fraud rules do not reachShopify's Fraud Control checkout rules and the Shopify Protect rule builder screen card payments and need Shopify Payments. OrderGate runs inside checkout validation, before any payment, so it works the same for cash on delivery, bank transfer, a local gateway, or a store in a country where Shopify Payments is not offered.
See it working
What it does not do
Stated plainly, because knowing the edges before you install is worth more than a longer feature list.
- Accelerated wallets (Apple Pay, Google Pay, Shop Pay): blocking still applies, but Shopify does not display the rejection message inside the wallet sheet, so the buyer is returned to checkout without an explanation. This is an open Shopify platform issue, not a setting.
- Customer tag rules match only signed-in customers. A guest who types the same email is not matched by a tag rule.
- IP address blocking is not offered. Shopify's checkout validation input contains no IP address and functions have no network access, so any app claiming IP blocking at checkout is doing it in the storefront layer instead.
- Not applied to: the Create Order API, order editing, Shopify POS, pre-orders and Try Before You Buy, or subscription (recurring) orders.
- A buyer who changes to a fresh email address can pass an exact-email rule. Phone rules exist for that reason, and on Standard so do name, street-address, domain, wildcard and location rules.
Free plan: up to 2 exact-email or phone rules at a time, log-only and enforce. Standard: $9 per month or $86 per year with a 7-day free trial, every rule type, up to 1,500 rules and Cash on Delivery hiding. No usage fees and no cap on the number of checkouts evaluated or blocked. Cancel from inside the app at any time.
Opening the app from your Shopify admin signs you in automatically.