cancel
Showing results for 
Search instead for 
Did you mean: 

Toast App Chargebacks

A couple of days ago I received a chargeback from a regular customer on an order dated 8/22/25 that was placed through Toast's app (toasttab.com).  Because I was busy with the Christmas holiday I was going to give the customer a call over the weekend.

Tonight I received 6 more chargebacks, ALL FROM THE SAME CUSTOMER, all ordered on Toast's app.  Some were deliveries, others were pickups.  The chargeback claims "10.4 - Other Fraud – Card Absent Environment".   This is obviously a scam by this customer, but shouldn't this be Toast's problem?  It's their app!   I can understand if I took the card over the phone, but she placed it online using Toast.  Even if I win the disputes, I'm out $75 for all the chargebacks!

Any advice?

1 ACCEPTED SOLUTION

josh212
Main Course I

First off, what’s up Westchester!

You’ve hit on the ultimate dilemma: the balance between security and customer friction. If we make ordering too restrictive (2FA, captchas, etc.), we lose legitimate sales. Even strict AVS (Address Verification) can be tricky, as people often order to their office or a friend’s house.

The Hard Truth: We are Responsible One thing every owner needs to realize is that we are ultimately responsible for these chargebacks. Even though the order is placed through Toast’s app (toasttab.com), it’s a "Card Not Present" (CNP) transaction. Even with an app-verified stored card, fraud can still happen, and the bank puts the liability on the merchant. You can't assume Toast will eat that cost just because it’s their platform.

Note: On 3rd-party apps (Uber/DD/Slice), those platforms usually take the hit for the chargeback since you’re already paying them a high commission, but for Toast direct orders, that's your money on the line.

How to Spot and Stop the Scam:

  • Document Everything: If it's a delivery, you need proof. Using a tool like Shipday is great for documenting the delivery with photos of the food at the address. If you have a photo and a GPS ping, you have a much better chance of winning a dispute.

  • Watch for "Red Flag" Area Codes: If the order comes in with a strange area code (not 914,845,917,929,347,646,201,332,516,212,203) take a second look and call as they usually are dummy numbers

  • Spot the "Dumb" Order: Scammers often get greedy. If the order looks nonsensical or "too big" for a standard ticket, pay attention. They’d probably get away with it if they just ordered a pizza, but they usually go overboard.

  • The Human Test: Train your staff to call the customer if an order feels "off." Ask them to confirm a billing detail like a zip code. Fraudsters usually crumble under pressure and will just hang up.

  • Zero Out Loyalty: This is a big one. If you identify a fraudulent order, immediately wipe their loyalty points. Don’t let them build up rewards for free food using a stolen card.

  • The Ban Hammer: Call Toast Support and ask them to ban the user from your restaurant and block their device ID. You should also report them to the 3rd-party apps; your report might be the final flag that gets them de-platformed for good.

Stay vigilant! It really comes down to us doing our due diligence to protect our bottom line.

Josh
Community Ambassador

View solution in original post

13 REPLIES 13

@HearthpizzeriaB So It sounds like a way to prevent your drivers to not forget the 2L Soda or the side salad would be more beneficial as I am sure it is costing more than the chargebacks 😀

Josh
Community Ambassador

My absolute dream would be that the go3 also tracked the drivers location and worked as a gps with optimized routing. I know there are 3rd party products that do that though. 

Brian Andersen, Community Ambassador
Hearth Pizzeria Needham MA

@HearthpizzeriaB  You can do this all with Shipday here is an example of some completed orders 

josh212_0-1767493234138.png

which completes in toast and closes the order and adds to shift review Shoot me a DM i can show you in detail

 

Josh
Community Ambassador

ashokr
Community Ambassador

Yep. The fee is big like 30% of sales. which is insane what the delivery platforms take. And the tip goes to the driver LOL. 

- Ashok Raj
Toast Community Ambassador

josh212
Main Course I

First off, what’s up Westchester!

You’ve hit on the ultimate dilemma: the balance between security and customer friction. If we make ordering too restrictive (2FA, captchas, etc.), we lose legitimate sales. Even strict AVS (Address Verification) can be tricky, as people often order to their office or a friend’s house.

The Hard Truth: We are Responsible One thing every owner needs to realize is that we are ultimately responsible for these chargebacks. Even though the order is placed through Toast’s app (toasttab.com), it’s a "Card Not Present" (CNP) transaction. Even with an app-verified stored card, fraud can still happen, and the bank puts the liability on the merchant. You can't assume Toast will eat that cost just because it’s their platform.

Note: On 3rd-party apps (Uber/DD/Slice), those platforms usually take the hit for the chargeback since you’re already paying them a high commission, but for Toast direct orders, that's your money on the line.

How to Spot and Stop the Scam:

  • Document Everything: If it's a delivery, you need proof. Using a tool like Shipday is great for documenting the delivery with photos of the food at the address. If you have a photo and a GPS ping, you have a much better chance of winning a dispute.

  • Watch for "Red Flag" Area Codes: If the order comes in with a strange area code (not 914,845,917,929,347,646,201,332,516,212,203) take a second look and call as they usually are dummy numbers

  • Spot the "Dumb" Order: Scammers often get greedy. If the order looks nonsensical or "too big" for a standard ticket, pay attention. They’d probably get away with it if they just ordered a pizza, but they usually go overboard.

  • The Human Test: Train your staff to call the customer if an order feels "off." Ask them to confirm a billing detail like a zip code. Fraudsters usually crumble under pressure and will just hang up.

  • Zero Out Loyalty: This is a big one. If you identify a fraudulent order, immediately wipe their loyalty points. Don’t let them build up rewards for free food using a stolen card.

  • The Ban Hammer: Call Toast Support and ask them to ban the user from your restaurant and block their device ID. You should also report them to the 3rd-party apps; your report might be the final flag that gets them de-platformed for good.

Stay vigilant! It really comes down to us doing our due diligence to protect our bottom line.

Josh
Community Ambassador