Order Review & Risk Queue
The Risk Queue, under-review order status, manual approve/reject workflow, and customer payment-link flow.
Order review and risk queue
When an order's risk score reaches the Hold for Review threshold, it enters the under review status and appears in the Risk Queue for manual evaluation. The default threshold is 70, giving you time to investigate suspicious orders before fulfillment proceeds.
The Risk Queue
Open the Checkout Security menu in WordPress to access the Risk Queue. The queue lists orders awaiting review and provides the information you need to make a decision:
- Risk score and risk level
- Factors that contributed to the score
- Customer and contact details
- Order contents and total
- Available approval and rejection actions
Review the order details alongside its risk factors before deciding whether to release or cancel the order.
Under Review status
Orders with the under review status are held while you investigate them. Payment is not captured, and the customer receives a notification that their order is being processed.
The status prevents automated fulfillment from proceeding until an administrator makes a manual decision. Approving the order releases it for the next stage of processing. Rejecting the order cancels it.
Manual approve/reject workflow
Use the Risk Queue to evaluate each held order and record a decision.
Review the order
Open the order from the Risk Queue and review its risk score, contributing factors, customer information, and order summary.
Approve the order
Click Approve to release the order. If auto-whitelisting is enabled, approval may also add the customer's IP address to the whitelist.
Reject the order
Click Reject to cancel the order. The customer receives a notification that their order has been cancelled.
Review the notifications
The plugin sends admin notifications for review actions. You can customize notification templates from Settings → Email Templates.
Customer payment-link flow
After you approve an order, you can send the customer a payment link so they can complete payment. This flow is supported for WooCommerce scenarios where the order was held before payment was captured.
The customer uses the payment link to return to the order and complete checkout. Confirm that the order and payment gateway are configured for payment-link processing before sending the link.
Auto-whitelisting after approval
When auto-whitelisting is enabled, approving an order adds the customer's IP address to the whitelist. The whitelist duration is controlled by ccp_order_whitelist_duration.
The default duration is 2592000 seconds, or 30 days. For configuration details and whitelist behavior, see the Trust & Whitelisting guide.
Admin notifications
Admins receive email alerts for high-risk orders and review actions. These notifications help your team identify held orders and track approval or rejection decisions without monitoring the Risk Queue continuously. You can enable a daily digest email from Settings → General to receive a summary of security activity, including order-review actions.