Overview
What CODGuard does, where it sits in your Shopify store, and how the pieces fit together.
CODGuard is a Shopify app that reduces return-to-origin on cash-on-delivery orders. It verifies COD customers over WhatsApp or SMS, scores every COD order for RTO risk, nudges shoppers toward prepaid, and gives you rule-level control over when cash on delivery is offered at all.
Everything is configured from the app dashboard. There is no theme code to write and no developer required.
Where CODGuard runs
CODGuard has three surfaces, and it helps to keep them separate in your head.
The storefront modal. An app embed block renders a verification and payment-mode modal on your storefront — product page, cart page and cart drawer. This is where the shopper enters a phone number, receives a one-time code, and picks how they want to pay.
Checkout enforcement. Two Shopify Functions run inside checkout itself. A payment customization hides cash on delivery when your rules disallow it; a delivery customization hides COD-specific delivery options on prepaid and partial orders.
The admin app. An embedded app inside your Shopify admin: dashboard, business rules, modal design, logs and billing.
The order of operations
- A shopper adds items and opens the cart.
- The CODGuard modal asks them to verify their phone and, where applicable, choose a payment mode.
- On success, CODGuard builds the checkout with payment-mode attributes attached and any prepaid discount applied.
- Shopify processes the checkout normally. Your own checkout is untouched.
- The
orders/createwebhook fires. CODGuard detects the payment mode, links it to the shopper's selection, records analytics, and computes an RTO risk score. - Depending on your thresholds, a risky order is flagged for review or auto-cancelled before dispatch.
What gets stored
Every OTP issued, every payment-mode selection, every message sent and its delivery status, every risk score with its signal breakdown, and an immutable event log of the whole funnel. Phone numbers are stored in E.164 format, encrypted at rest, and masked everywhere in the admin.
Where to go next
- Quickstart — install and go live in under ten minutes.
- OTP verification — configure channels, retries and templates.
- Business rules — control when COD is offered.
- Billing — how plans and message charges work.
