Fraud prevention for online stores
Stop card testing and chargebacks before the card is charged.
Every card payment is screened and scored before it's charged. Checkout rules decline card-testing bursts, throwaway emails and mismatched locations or hold an order for your review; payment rules block high-risk scores and ask for 3D Secure on bigger orders; pre-dispute alerts can refund small payments before they become chargebacks.
- Velocity limits per card, email and connection
- Hold risky orders for review, not just decline
- 3D Secure above an amount you set
- Pre-dispute alerts refunded automatically
48 attempts declined in the last hour · Too many attempts with one card
No card chargedHeld for review
Authorized, not taken- Online card rate
- 2.75% + 30¢Online card rate
- First 90 days with the launch offer
- 2.5% + 30¢First 90 days with the launch offer
- Payouts to your Anytime Capital account
- InstantPayouts to your Anytime Capital account
- Countries on local payout rails
- 71+Countries on local payout rails
- Monthly, setup or PCI fees
- $0Monthly, setup or PCI fees
Checkout rules
Eight rules that run before the card is charged
Each starts off. Switch one on to decline matching payments or hold them for review; the dashboard shows how many of the last 30 days' checkouts it would have caught first.
Too many attempts with one card
Counts every checkout attempt with the same card number: the signature of someone testing stolen cards.
Too many attempts from one email
Counts checkout attempts with the same email address, whatever card is used.
Too many attempts from one connection
Counts attempts from the same IP address. Shared office and school networks can reach it sooner.
Block email domains
Payments from email addresses at the domains you list, and their subdomains.
Disposable email address
Throwaway inboxes people use to avoid being contacted later. We keep the list up to date.
Location doesn't match billing country
The customer connects from a country other than their billing address's. Travelers and VPNs can match too.
First-time customer over an amount
A customer who has never paid you before spends more than your limit in one payment.
Most one customer can spend in 24 hours
The total of one email address's payments in the last 24 hours, including this one.
Payment rules & 3D Secure
Scores, countries, amounts and 3D Secure
Every card payment gets a 0–100 risk score. Block high scores, cap the amount, block issuing countries and ask for 3D Secure above an amount you choose.
- Block high-risk paymentsScore 75 or more
- Require 3D Secure above an amountOver $500.00
- Block cards from selected countries3 countries
- Maximum amount per payment$5,000.00
- Refund pre-dispute alerts automaticallyUnder $100.00
- Risk scoring on every paymentEach card payment gets a 0–100 risk score from our fraud screening before the card is charged.
- Rules you write in plain EnglishBlock scores of 60, 75 or 90 and up, cap the amount per payment, or block cards issued in chosen countries.
- 3D Secure where it countsAsk customers to confirm larger payments with their bank, which usually moves fraud-dispute liability to the issuer.
- Pre-dispute alertsRefund small payments automatically when a bank warns a dispute is coming, before it becomes a chargeback.
- Evidence assembled for youWhen a dispute lands, the order, the customer record, delivery and 3D Secure results are gathered into one response.
- Refund approvalsRefunds over an amount you choose wait for the owner, and every action is in the audit log.
Manual review
Hold the risky order, keep the good customer
Owners and admins decide in Payments → Review; members can look. You're alerted the moment a payment is held.
Authorized, not taken
A held payment is reserved on the card. The customer sees that you're confirming the order; the receipt waits for your approval.
Everything to decide on one screen
Why it was held, the card, where the customer is, 3D Secure, the fraud score, their history with you and the time left.
Approve or reject
Approve and it's handled like any payment. Reject and the hold is released and the customer told politely by email.
Nothing left hanging
Holds last at most 5 days. Undecided after 4, it's cancelled (or approved, if you choose), with a reminder a day before.
Chargebacks
Fewer disputes, and faster answers to the rest
Refund the ones you'd lose anyway before they open, and answer the others from one place.
Pre-dispute alerts refunded for you
Untouched payments at or under your limit are refunded in full before the dispute opens.
Refund approvals
Refunds over your limit, by anyone but the owner, wait for the owner's approval.
Disputes answered from one place
Track each dispute from needs response to won or lost, with your terms and refund policy ready as evidence.
Every layer of protection
How screening, identity checks and dispute evidence work across every way you take payments.
Learn more
Launch offer
2.5% + 30¢ for your first 90 days
Open an Anytime Capital business account with the offer attached and your first 90 days of card payments run at 2.5% + 30¢, then 2.75% + 30¢. No monthly, setup or PCI fees, and every feature on every account.
Prefer to start at the standard rate? Open a business account
Awaiting approvalShopify
Sign in and join the waitlist on the Shopify card in Integrations; we'll tell you the day it's approved.
LiveWooCommerce
The free plugin for WordPress stores: upload, paste an API key and webhook secret, enable.
Live syncQuickBooks Online & Xero
Payments, fees, refunds and payouts posted to your books automatically, once each.
Switch from Stripe
Import customers, plans, codes, links and open invoices; move subscribers without double charges.
Processing $1M+ a year?
Processing $1M+ a year? Get volume or interchange-plus pricing, a shared Slack channel and a named account manager.
Refer a business
You both pay 2.5% + 30¢: the business you refer for its first 90 days, you for 30 more days per business, up to 12.
Payments for online stores
Everything else your store needs
Each guide covers one part of running a store's payments on Anytime Capital, with what works today and how to set it up.
- Payments for online storesEverything an online store needs from its payments, in one place.
- Shopify storesThe app's status, Shopify's own fee, and what Shopify sellers use today.
- WooCommerce pluginDownload the plugin, connect a key and a signed webhook, take payments.
- Switch from StripeImport customers, catalog, codes and invoices; move subscribers once.
- QuickBooks & Xero syncEvery sale, fee, refund and payout posted to your books, once each.
- SubscriptionsBoxes, memberships and replenishment: trials, codes, plan changes, usage.
- Wholesale & B2BInvoices with deposits, bank transfer, ACH and USDC for trade buyers.
Frequently Asked Questions
What is card testing, and how do you stop it?
Card testing is someone trying stolen card numbers against your checkout to see which work. Checkout rules count attempts per card, per email and per connection over an hour and 24 hours, and decline the payment (or hold it for review) once a limit is passed, before any card is charged.
What happens when an order is held for review?
The payment is authorized on the customer's card but not taken, and the customer is told the business is confirming the order. Owners and admins approve or reject it in Payments → Review, which shows why it was held, the card, location, 3D Secure, the fraud score and the customer's history. A hold lasts at most 5 days; if nobody decides within 4, it's cancelled, or approved if you choose so.
Does 3D Secure protect me from chargebacks?
With Require 3D Secure above an amount, customers confirm larger payments with their card issuer, usually in their banking app. That usually makes the issuer, not you, responsible for fraud disputes on those payments.
What are pre-dispute alerts?
Card networks sometimes warn that a customer is about to dispute a payment. Turn on automatic refunds with a limit and untouched payments at or under it are refunded in full before the dispute opens, so you avoid the dispute and its fee.
Do checkout rules apply to subscriptions?
Checkout rules run on every card checkout, on payment links and invoices alike. Holds for review apply to one-time card payments; a subscription or bank payment that matches a hold rule goes through as usual.
Can I see what a rule would catch before I switch it on?
Yes. Next to each checkout rule, the dashboard shows how many of the last 30 days' checkouts it would have matched, so you can set limits that stop fraud without turning away real customers.
Is Anytime Capital a bank?
No. Anytime Capital is a fintech company, not a bank. Payment processing, banking and payout services are provided by Anytime Capital's licensed partners.
Take your store's next payment on Anytime Capital
Open a business account in a few minutes, claim 2.5% + 30¢ for your first 90 days, and take your first payment as soon as you're verified.
Anytime Capital is a fintech company, not a bank. Payment processing, banking and payout services are provided by Anytime Capital's licensed partners. Rates shown are for US card payments; international cards, currency conversion and disputes may carry additional fees shown in your dashboard before you accept a payment.
Shopify, WooCommerce, WordPress, QuickBooks, Intuit, Xero, Zapier, Stripe, Visa, Mastercard, American Express, Discover, Apple Pay, Google Pay, USDC and USDT are trademarks of their respective owners, used here only to identify the platforms and payment methods Anytime Capital works with. Anytime Capital is not affiliated with or endorsed by them. Stores, products and figures shown in product images are illustrative.