• Over the past week I’ve received a few credit card orders that don’t actually have payment! Our site has existed for 5 years and I’ve never seen such a thing. It’s clearly folks trying to scam the site, but I’m concerned how this is possible. I can confirm via our Stripe account that there was no payment actually attempted, and WooCommerce doesn’t reflect the Stripe fees that you normally can see deducted. I’ve also noticed a small difference in the internal Order Notes:

    For a legitimate order, I see the following:

    1. Stock hold
    2. Stripe payment intent
    3. Stock level reduction
    4. Order status change from Pending payment to Processing

    For a fake/scam order, I see the following:

    1. Stock hold
    2. Order status change from Draft to Pending payment
    3. Stock level reduction
    4. Order status change from Pending payment to Processing

    Somehow it appears they’re able to make a Draft order? Has anyone seen this? Any known way to resolve this?

    The page I need help with: [log in to see the link]

Viewing 5 replies - 1 through 5 (of 5 total)
  • Plugin Support Zubair Zahid (woo-hc)

    (@doublezed2)

    Hello lostbill,

    Thank you for contacting WooCommerce support.

    I understand you’re receiving credit card orders without actual payments, and the order notes show differences between legitimate and fake orders.

    When did this start, and how many such orders have appeared?
    Please share screenshots of the affected orders’ Order Notes for better understanding.

    Also, contacting Stripe may provide insights into why these orders are bypassing payment.

    Looking forward to your response. ??

    Thread Starter lostbill

    (@lostbill)

    Hello @doublezed2 this started about a week ago. I’ve only received three such orders so far.

    Stripe does not have evidence of receiving any credit card orders, which makes me suspect it is a flaw in the website where users are somehow bypassing the credit card process and forcing the creation of a draft order. I was hoping there was somewhere I could see the raw HTTP logs to see if these orders correspond to strange behavior against our website, but perhaps I’ll need to enable such logging within Apache directly.

    Here are the Order Notes and payment detail for the order which did not actually have a Stripe payment:

    Plugin Support Zubair Zahid (woo-hc)

    (@doublezed2)

    Hello lostbill,

    Thank you for your reply.

    The order notes show order status as Draft at the beginning. Draft orders are created when customers start the checkout process while the block version of the checkout is in place.

    Since your checkout page is using classic shortcode checkout, this should not be happening.
    Could you please check and confirm if there is another page on the site that has Checkout Block?

    Order notes are missing Payment Intent and Payment ID values.
    Which proves that charge is not taking place.
    Could you share a screenshot of the Edit Order page showing “Payment via” data.
    Here is an example:

    Lastly, I want to inspect your site setup and active plugins.
    Specifically payment method plugins since this issue might be related to them.

    Please share your site’s System Status Report with me.
    You can paste it into https://pastebin.com and share the link here.

    Looking forward to your response. ??

    Thread Starter lostbill

    (@lostbill)

    Hello @doublezed2, the Order Details just say this: Payment via Pay with Credit or Debit Card. Paid on February 27, 2025 @ 11:33. Customer IP:?XX.XX.XX.XX. I definitely do not have a second checkout page on the site, and double checked to be sure.

    Here is the system status report: https://pastebin.com/X9CZGiJk

    Plugin Support Zubair Zahid (woo-hc)

    (@doublezed2)

    Hello lostbill,

    Thank you for your reply.

    To investigate this issue further, could you share:
    1- Screenshot of WooCommerce → Settings → Payments page.
    2- On the Payments page, click Stripe payment method and share a screenshot of the Stripe page.

    While you are on the Stripe page, switch to the Settings tab and scroll down to Advanced settings.
    Check whether the “Log error messages” is checked or not. If it is not, then check mark it.
    This will enable logging and allow us to see errors at WooCommerce > System Status > Logs.

    Once I have more information, I will be in a better position to assist you further.

    Best regards.

Viewing 5 replies - 1 through 5 (of 5 total)
  • You must be logged in to reply to this topic.