Key Takeaways
- Scenario 733 is fraud-review hold-release webhooks — not preorder slips, loyalty-points expiry, gift-wrap ready, digital downloads, pre-auth holds, custom-proof approval, line-item cancels, warranty, store credit, price-match, try-on kits, subscription skips, BOPIS, waitlist restocks, preorder drops, gift-card sales, COD, split-ship, refunds, or renewals.
- “Review FR-4 cleared — order will ship” is transactional. “Shop the sale again” is marketing. Split SIMs.
- Cap SMS per review id. Risk-engine retries of review.cleared will empty prepaid.
- Priced by devices and SMS send volume. You use your own phone and operator SMS credit. Free is 1 / 300 / 300. Developer is 25,000 SMS per year.
- Verify HMAC. A forged review.cleared event nags people whose order already shipped.
- REST fields live in Developer Center — not a CodeCanyon fraud plugin. MCP, if you use it, is only a REST wrapper.
Summary
Scenario 733 is ecommerce webhooks for fraud-review hold release. The risk engine owns the queue. Your worker texts cleared / declined — not the whole “shop the sale again” segment. Priced by devices and SMS send volume. You use your own phone and operator SMS credit.
If you key SMS on cart id instead of review+order, the second engine ping will re-open a “will ship” clock that already left the dock.
Fraud-review release
Map review.cleared / review.declined hooks to a worker. Shopify overview · gateway webhooks. Fields: Developer Center. Industry context: GSMA.
Event map
| Shop event | SMS job | Idempotency | SIM |
|---|---|---|---|
| review.cleared | Will ship | Review + order | Transactional |
| review.declined | Once | Review + order | Transactional |
| shop the sale again | Promo | Consent + quiet hours | Promo MSISDN |
| staff login | OTP | — | Dedicated OTP phone |
One SMS per hold
Engine retries. Your key is review+order. Idempotent send. DLR ≠ shipped — DLR.
Cost
Priced by devices and SMS send volume. You use your own phone and operator SMS credit. Free: 1 device, 300 SMS lifetime, 300 contacts. Developer: 25,000 SMS per year. Paid plans uncap platform volume; devices still meter. Pricing.
Ops
Spare radio before a flash-sale review pile. Doze · setup.
Security
Separate risk secrets from gateway callbacks. Do not SMS the decline reason. Trust Center · OTP. Shop-again STOP off the review inbox. STOP.
Checklist
- HMAC required.
- Idempotency on review+order.
- No decline reason on SMS.
- OTP isolated.
- Airtime for flash-sale review pile.
Next steps
Ecommerce templates · SMS API documentation.
Related product pages
Jump to the live product docs for this topic—not another long-form article.
- SMS webhook integrationInbound and status events
- transactional SMS for orders and alertsEvent-driven messages
- SMS API documentationLive endpoint reference
- device and SMS volume pricingPlans and allowances





