...

Protecting an online shop from fraudulent orders

A shop does not have to, and has no right to, check every buyer. But an expensive cash-on-delivery order, the handover of a valuable parcel, an 18+ item and a company buyer on deferred payment are worth checking: the passport without manual entry, its authenticity and validity, the company by INN — in one checkout step.

Checking the recipient of an expensive cash-on-delivery order: the passport is recognised, no signs of forgery, the passport is valid, the full name matches the order
5 ₽ buyer check against a single register
from 16 ₽ passport with document anti-fraud
195+ countries and territories: buyers' passports
24 database checks in the API catalogue
Passport without entry Document anti-fraud Validity Age 18+ Company by tax number No selfie

Data is kept in Russia · Register of Russian software No. 19972 · 152‑FZ and 242‑FZ

Distance selling, personal data and payments: three laws for a shop

An online shop has no duty to check its buyer. But the law gives the buyer the right to cancel an order and get a refund, forbids refusing the buyer for withheld personal data, and leaves disputes over payment with someone else's card to the bank.
These three rules determine when a document check is appropriate and when it is an extra step and a risk of a fine.

  • Distance selling

    Consumer Rights Protection Law, Art. 26.1; Rules for the Sale of Goods, Government Decree No. 657.

    Schemes

    What the buyer can do

    • Cancel the purchase at any time before delivery and within 7 days after it
    • If the procedure and terms of return were not given in writing on delivery — within 3 months
    • Return goods of proper quality if their presentation and properties are preserved; without a receipt — with other evidence of purchase

    What the shop must do

    • Refund the money no later than 10 days after the request, less the cost of delivering the returned goods
    • Allow the goods to be returned remotely, not only at the shop
    • Goods made to a specific buyer's order are not returnable under this rule
  • The buyer's personal data

    Consumer Rights Protection Law, Art. 16(4); Federal Law No. 152-FZ, Arts. 5 and 6.

    When a passport is allowed

    Ban

    • The shop may not refuse an order, its fulfilment or a return because the buyer refuses to provide personal data
    • The exceptions are data required by law or directly related to performance of the contract
    • At the buyer's request the shop explains why the contract is impossible without the data

    What follows from this

    • Data by purpose: no more than the order needs
    • The basis — performance of the contract or the buyer's consent
    • A passport "just in case" from every buyer is excessive
  • Payment without the owner's consent

    Federal Law No. 161-FZ, Arts. 8 and 9; Federal Law No. 41-FZ on the GIS Antifraud.

    Refunds and cards

    Who is responsible

    • A transaction made without the client's consent is handled by the bank that issued the card: it reimburses an individual client within 30 days if the client did not breach the rules for using the card
    • Information on transfers made without consent from the Bank of Russia database and GIS Antifraud signals are received by banks and telecom operators

    What is left to the shop

    • The acquiring bank may withhold the disputed amount from the shop under the acquiring agreement and the payment system rules — this is a chargeback
    • The shop's protection comes before dispatch: who the buyer is and whether they match the recipient

When a shop may ask for the buyer's passport

A document may be requested when it is needed to fulfil a specific order or is directly required by law. In other cases the check is an offer to the buyer, not a condition of sale: the shop may not refuse the buyer for withheld data.
Five situations where a document is justified and one where it must not be requested. The decision on each rests with the shop's lawyer.

  • Goods with an age restriction

    If there is doubt about the buyer's majority, the seller may demand an identity document. Online, a check by the date of birth in the document stops the order before picking; the check on handover remains.

    • Rules for the Sale of Goods, Government Decree No. 657
  • Handover of an order against a document

    If the order terms state that a valuable item is handed only to the recipient against a document, the passport is needed to perform the contract — the buyer sees this before paying.

    • Art. 16(4) of the Consumer Rights Law
  • Deferred post-payment

    The goods are handed over before payment and the shop in effect lends to the buyer. Checking identity and debts before such a shipment is related to performance of the contract, and database checks are done with the buyer's consent.

    • Art. 6(1)(5) of Federal Law No. 152-FZ
  • The buyer is a company

    The company's representative confirms their authority: a passport and a power of attorney, or the right to act without one. The company is checked by INN — this is data on a legal entity, not personal data.

    • Civil Code of the Russian Federation, Arts. 182, 185
  • Refund by the wrong method

    The shop refunds the money in cash or to details other than those of the payment to the person who bought the goods. The document confirms that the money goes to the buyer and not to a third party.

    • Art. 26.1 of the Consumer Rights Law; Rules for the Sale of Goods
  • When a passport must not be requested

    An ordinary paid order delivered by courier or to a pickup point by code. Refusing such an order because a passport was not provided violates the consumer rights protection law.

    • Art. 16(4) of the Consumer Rights Law; Art. 14.8(7) of the Code of Administrative Offences

Electronics, post-payment, pickup points, D2C and B2B: where a shop loses money

A fraudulent order looks different each time. An electronics shop is hurt by a parcel sent to a drop recipient, a cash-on-delivery shop by an order collected "under someone else's name", a brand by hundreds of accounts for a single promo code.

  • Electronics and expensive goods

    • Smartphones, laptops, appliances — items that are easy to resell
    • Risks — payment with someone else's card, an order for a drop, substitution on return
    • NeuroVision — the recipient's passport by document before dispatch, anti-fraud and passport validity
  • The shop's post-payment and instalments

    • Payment on receipt, after trying on, in N days
    • Risks — an order using someone else's data, non-collection, non-payment after handover
    • NeuroVision — a document without manual entry, INN, bankruptcy and debts with the buyer's consent
  • Collection from pickup points

    • Own network or partner points
    • Risks — handover by code to anyone, the recipient does not match the buyer
    • NeuroVision — verified full name and date of birth for matching at handover of valuable orders
  • D2C brands and loyalty programmes

    • A manufacturer's own shop, bonuses, referral payouts
    • Risks — multi-accounts for a promo code, resale of limited-edition goods
    • NeuroVision — a document only where the bonus or payout is large
  • B2B orders with deferred payment

    • The shop sells to companies and sole proprietors, payment after dispatch
    • Risks — a shell company, a nominee director, blocked accounts
    • NeuroVision — company by tax number, the representative by passport
  • Online shop orders before dispatch: electronics, clothing and goods for business

Checking an expensive order: from basket to handover

The check is triggered by the shop's rule, not for everyone: order amount, payment method, product category, new account. Other buyers place their order as usual.

Step 1

The shop's rule decides whether a document is needed

An order above the threshold with cash on delivery, an 18+ item or a first purchase from a new account — and a "Confirm the recipient" step appears at checkout. The buyer sees why it is needed before paying.

The shop's rule triggers a recipient check for an expensive cash-on-delivery order
Step 2

The passport — in a minute, without manual entry

The buyer photographs the passport in the widget on the website or in the shop's app. The fields arrive in JSON, the document is checked for a photo of a screen, a photocopy, a pasted-in photo and traces of editing, and age — by the date of birth. The passport's validity against the Ministry of Internal Affairs database is a separate request.

Recognition of the buyer's passport without manual entry and a check of the document for forgery and age
Step 3

The order — to the person who was checked

The shop's rules confirm the order, send it to a specialist or offer prepayment. The full name of the verified recipient goes to the pickup point: the employee matches the document when handing over a valuable order.

The order is passed to the pickup point with the full name of the verified recipient, a change of recipient after payment is sent for checking

Online shop buyer check: checklist

Eight steps from the "when to check" rule to a return dispute. The tag shows who performs the line: NeuroVision, the bank or the shop itself.

  • The amount threshold, payment method, product category and account age at which a document step appears at checkout Shop
  • The "handover against a document" condition and the purpose of the check — in the offer and at the checkout step, before payment Shop
  • Ordinary paid orders — without a document: refusing for withheld data is prohibited Shop

  • A Russian passport or a foreign citizen's passport is recognised from a photo: full name, date of birth, series and number — without retyping NeuroVision
  • Document anti-fraud: a photo of a screen, a photocopy, a printout, a pasted-in photo, erasures, editing in an editor, mismatched dates and fields NeuroVision
  • Checksums of the machine-readable zone for passports with an MRZ NeuroVision

  • Validity of a Russian passport against the Ministry of Internal Affairs database via SMEV: expired, replaced, lost and invalid documents NeuroVision
  • The buyer's full name in the order matches the full name in the document; if they differ — a question to the buyer, not an automatic refusal Shop

  • The age threshold in the scenario: a document with a date of birth below the threshold does not pass. More details — 18+ age check NeuroVision
  • Alcohol, tobacco and nicotine-containing products are not sold remotely — age verification does not change that Shop

  • INN by passport — no namesakes; then by INN — the individual's bankruptcy and enforcement proceedings, with the buyer's consent NeuroVision
  • A post-payment limit for a new buyer and the "prepayment if the check is declined" rule Shop

  • Company by tax number: status in the Unified State Register of Legal Entities or Individual Entrepreneurs, liquidation, the director and founders NeuroVision
  • A nominee or mass director, blocking of account operations by tax authority decision — before the payment deferral NeuroVision
  • The representative — by passport, authority under a power of attorney is checked by the shop Shop

  • The passport number and INN from the API response are matched against the shop's buyer database: a repeated welcome bonus or referral payout is visible at once Shop
  • A check session is one document of one person: changing the document mid-check is rejected by a scenario setting NeuroVision

  • A transaction made without the cardholder's consent is handled by the bank: reimbursement of the client and the dispute with the shop — under the acquiring agreement Bank
  • A refund in cash or to new details — to the buyer whose identity is confirmed Shop
  • The check report — the verdict, the records found, the source and the register's response time — is stored with the order NeuroVision
  • NeuroVision — the item is handled by NeuroVision: document recognition, anti-fraud, database checks and company by INN
  • Bank — a step of the bank that issued the card: handling a transaction made without the owner's consent and reimbursing the client
  • Shop — a step of the shop itself: check rules, order matching, the decision on handover, refund and post-payment

Promo codes, bonuses and multi-accounts: where a document is needed and where not

  • First-order discount

    Asking for a passport for a promo code worth a few hundred roubles means losing honest buyers. Here the shop's rules work: one promo code per delivery address, card and device. A document is not needed.

  • A large bonus or cashback for withdrawal

    When a bonus can be withdrawn as money or is comparable to the price of the goods, a document pays off: one passport — one payout. The passport number and INN from the response are matched against the shop's buyer database.

  • Referral programme

    Accounts of "friends" opened with other people's data are a classic of bonus hunting. Before paying the reward to the inviter — the invitee's document, its authenticity and validity.

  • Limited-edition goods

    The "one unit per person" restriction is bypassed with dozens of accounts. A document check at the order stage makes the limit real, not nominal.

For details on multi-accounts, bonus hunting and signals on the registration form — see the page registration anti-fraud. NeuroVision does not check the phone, device and address and does not look for repeat customers by face: on a shop's page, a document is for the cases where the stake is higher than the price of the check.

Refunds and payment with someone else's card: what the bank decides and what the shop does

A shop loses money on a fraudulent order twice — the goods and the disputed amount

The bank handles a card transaction after the goods have already left. Information on fraudulent transfers from the Bank of Russia database and The «Antifrod» state system is received by banks and telecom operators, not by the shop. That is why the shop's protection comes before dispatch.

  • 01

    The bank reimburses the cardholder

    If the cardholder did not consent to the payment and informed the bank in time, the bank returns the amount within 30 days — unless it proves that the client breached the rules for using the card.

  • 02

    The shop is liable under the acquiring agreement

    The acquiring bank may withhold the disputed amount from the shop under the agreement and the payment system rules. By then the goods have usually been handed over.

  • 03

    The buyer may return the goods

    7 days after receipt, and without written information about returns — 3 months. The money — within 10 days. Goods can also be returned remotely, without visiting the shop.

  • 04

    What the shop can do

    Confirm the identity of the recipient of an expensive order before dispatch, not change the recipient after payment, refund in cash or to new details only to a verified buyer, and keep the check report with the order.

  • 7 days to cancel the purchase after receipt
  • 10 days to refund the buyer
  • 30 days for the bank to reimburse a transaction made without consent

Checks for an online shop

The set is built around the shop's rule: for expensive orders — the document, for post-payment — databases as well, for B2B — the company by INN. Payment is for completed checks; a check for which there was not enough data is marked as skipped and is not charged.

Buyer's passport

Recognition without manual entry and an authenticity check.

  • OCR

    Russian passport recognition

    A Russian passport is recognised from a photo: the fields arrive as a JSON response to the platform.

    from 16 ₽ with anti-fraud

    Learn more
  • 195+ countries and territories

    Foreign national's passport

    A foreign national's passport is recognised from a photo; the name in Latin letters is taken from the machine-readable zone.

    from 16 ₽ with anti-fraud

    Learn more
  • Screen · copy · pasted photo · editor

    Document anti-fraud

    A photo of a screen, a photocopy, a pasted-in photograph and traces of editing — before the order is dispatched.

    included in the package

    Learn more
  • Date of birth in the document

    Age threshold

    A document with a date of birth below the threshold set in the scenario does not pass the check.

    included in the package

    Learn more

How much it costs to check an expensive order

A fixed price per check, no subscription fee. You pay only for orders on which the check rule was triggered — ordinary buyers do not go through the check.

  • A document with anti-fraud

    from 16 ₽ per session

    Calculate

    Recognition of a Russian or foreign citizen's passport, document anti-fraud and the age threshold; an additional document in the same session — 10 ₽. At 10 000 checks a year — 18 ₽, at 50 000 — 16 ₽.

  • Most popular choice

    Individual checks

    5 ₽ per check

    Configure a set

    Passport validity, INN, bankruptcy, enforcement proceedings, lists and sanctions — separately, to fit your rule.

  • Company by tax number

    on request

    Select

    Status in the Unified State Register of Legal Entities or Individual Entrepreneurs, shell-company signs, the director and founders — for B2B orders with deferred payment.

Example: a document check with anti-fraud and passport validity for a cash-on-delivery order — from 21 ₽. The retention period of document images is set in the scenario and the contract. Calculator on the pricing page.

Integration with checkout and handover

A shop needs one place to integrate — the checkout step where the check rule is triggered. For a B2B department without integration the web interface is enough.

Widget and API

The widget is embedded in the checkout on the website or in the app and works in a mobile browser and WebView: the buyer photographs the passport, the fields and the anti-fraud result arrive in JSON, and the session outcome goes by webhook to your server. Database checks — by a POST kyc/checks/run request, the result is collected by the run identifier. API documentation

  • Web widget
  • REST API
  • A cloud in Russia
  • On-premises

Test access for 1 month.

Payment for the checks performed, the retention period of images — in the flow and the contract, support via a ticket system.

Why online shops choose NeuroVision

A shop needs a check that an honest buyer passes in a minute and a fraudster does not, and that is switched on only where it pays off.

A check by rule, not for everyone

The document, the Ministry of Internal Affairs database, INN and the buyer company — in one API. You decide on which orders to enable the step; other buyers do not see it.

There is no need to assemble a solution from several vendors and reconcile their responses.

Passport Age Tax number JSON

No retyping

Passport fields arrive in JSON, the operator does not need to match the scan against the order by hand.

No selfie

A document is enough for an order: the buyer does not need to photograph their face.

A price per check

From 5 ₽ per register and from 16 ₽ per document, no subscription fee.

Data in Russia

Cloud in Russia or installation inside your perimeter, Federal Laws No. 152-FZ and No. 242-FZ; the platform is in the Russian software register No. 19972.

Online shop glossary: distance selling, post-payment, chargeback

A short guide to the concepts that come up in disputes over orders, returns and payments.

Remote sale
A sale by description of the goods — on a website, in an app, by catalogue — without the buyer being able to see the goods before the contract is concluded.
Distance selling
Fraudulent order
An order placed with someone else's or invented data, paid for without the cardholder's consent or aimed at non-payment, substitution of goods or a bonus.
Fraudulent order
Post-payment
Payment after the goods are handed over: on receipt, after trying on or within an agreed period.
Post-payment
Non-collection
An order that the buyer did not collect or refused to pay for on receipt. The shop loses the delivery and storage costs.
Unclaimed order
Chargeback
A refund to the cardholder for a disputed transaction, which the acquiring bank debits from the shop under the acquiring agreement and the payment system rules.
Chargeback
Transaction without the client's consent
A payment or transfer that the cardholder did not make and did not authorise. It is handled and reimbursed by the client's bank.
Unauthorized transaction
Drop
A person in whose name the receipt of goods or money obtained by fraud is arranged, in order to hide the real customer.
Mule
Bonus hunting
Registration of many accounts by one person for welcome bonuses, promo codes and referral payouts.
Bonus abuse
Document anti-fraud
Document image check for a photo of a screen, a photocopy, a printout, a pasted-in photo and traces of editing.
Document fraud check
A shell company
A company created for one-off operations: nominee director, no real activity, accounts are often blocked.
Shell company

Frequently asked questions about protecting an online shop from fraudulent orders

Only when the data is needed to fulfil the order or is required by law: an age-restricted item, handover of a valuable order against a document, post-payment with deferral, a company representative. In an ordinary order the shop may not refuse because the buyer did not give a passport.

For expensive cash-on-delivery orders — a document step: the passport is recognised without manual entry, checked for forgery and against the Ministry of Internal Affairs database, and the full name is matched with the order. The full name of the verified recipient goes to the pickup point.

No. Who owns the card and whether the payment was made without the owner's consent is handled by the bank. NeuroVision checks the document and the buyer's data before dispatch and does not see payment or cards.

A check cannot cancel a card dispute: the bank handles it under the payment system rules. It reduces the chance that a valuable order goes to the wrong person and provides a report on who received it.

For small discounts — by the shop's rules on address, card and device. For bonuses that are withdrawn as money and for referral payouts — a document: the passport number and INN from the response are matched against the buyer database.

No. For an order a document and database checks are enough. We do not offer face comparison and Liveness on this page.

No. Retail sale of alcohol, tobacco and nicotine-containing products by remote means is prohibited, and an age check does not change that. For other 18+ goods the age threshold is set in the document check scenario.

By INN: status in the Unified State Register of Legal Entities or Individual Entrepreneurs, shell-company signs, nominee director, blocking of account operations, the director and founders. The representative — by passport.

The buyer may return goods remotely within 7 days, the money — within 10 days. The shop checks the goods on acceptance and refunds in cash or to new details only to the person who confirmed their identity.

No. A shop that sells its own goods is not a subject of the anti-money-laundering law and not an intermediary platform under the platform economy law. The check is its decision about the risk of an order.

For the shop's own post-payment — yes: the document, INN, bankruptcy and debts with the buyer's consent. If the instalment is provided by a bank or an instalment service, they have their own rules — see buyer checks for instalments.

A document with anti-fraud — from 16 ₽, a single-register check — 5 ₽, no subscription fee. A company check by INN — by quotation. Test access — 1 month.

We will select checks for your online shop

Tell us what you sell, which orders you consider risky and how buyers pay — we will propose a check rule and give you test access.

Can't put your request into words? Book a call and our team will contact you at a convenient time

Book a call

The company is included in the register of IT companies and the register of personal data operators of the Russian Ministry of Digital Development.

Address: Moscow, Presnenskaya Embankment 12 — Moscow City business centre, Federation Tower. Nearest metro stations: Delovoy Tsentr and Mezhdunarodnaya.