Chargeback Fraud and Disputes

// Inside your order-confirmation handler, after the charge succeeds.
// `shield` is the scored result the shared waitForScore helper returns;
// `requestId` is the request_id you already passed into waitForScore.
async function recordOrder(order, requestId, shield) {
  await db.orders.update(order.id, {
    // The identity stamp you will replay if this charge is ever disputed.
    shield_device_id:  shield.device_id,            // server-derived, durable, browser-bound
    shield_user_hid:   shield.user_hid,             // the hashed account id you passed in
    shield_score:      shield.score,                // 0 to 100 at buy time
    shield_country:    shield.public_ip?.country,  // IP country at buy time
    shield_request_id: requestId,        // ties back to the exact identification
  });
}

const ALL_ZERO = '00000000-0000-0000-0000-000000000000';

// `dispute` carries the order id your processor (Stripe, Adyen, etc.) reported.
async function buildEvidence(dispute) {
  const order = await db.orders.get(dispute.orderId);

  // Lead with the account: user_hid survives cookie clears and browser
  // switches, so it captures the buyer's full history.
  const rows = await shieldHistory('user_hid', order.shield_user_hid, 50);

  return rows.map((s) => ({
    when:        s.created_at,
    device:      s.device_id,
    visitor:     s.visitor_id,
    country:     s.country,
    score:       s.score,    // a clean score here strengthens the case
    browser:     s.browser,
    device_type: s.device_type,
    // Same physical browser environment as the disputed order. The all-zero
    // DeviceID means the visit could not be identified, so it never counts.
    same_device:
      s.device_id === order.shield_device_id && s.device_id !== ALL_ZERO,
  }));
}