Companies Using NoFraud

I build the detection rules behind our crawl, so I started NoFraud where I always start: with what the rule sees. A domain counts when a page loads a script from services.nofraud.com. As of our October 2026 crawl that is 6,382 live domains, 1,981 of them matched to a company. On 15 October I loaded the 50 sites in our table in a browser: 43 loaded the script, and the other seven hid behind bot checks or sent me to a local storefront. I also read the script address on every domain where our crawl recorded it, because a fraud tool loaded under somebody else's account would mean the count measures that account, not the store. It doesn't. NoFraud is the cleanest of the three order-fraud tools I checked this week.

One script, two addresses

On 4,494 domains we have the address NoFraud's script was loaded from. 4,392 of them load the Shopify app's device script with the store's own myshopify name in the query string; 102 load a numbered customer script, the version for BigCommerce, Adobe Commerce and direct integrations. Those 4,494 domains belong to 3,433 stores. The busiest single store sits on 29 domains, and no account comes near 1% of the count. Shopify runs on 98.0% of NoFraud domains in our stack table; in our own census BigCommerce shows up on 48 domains and Adobe Commerce on 13.

Sales signal: treat NoFraud as a Shopify app first. A seller targeting BigCommerce or Adobe Commerce stores will find a few dozen NoFraud merchants, not thousands.

Flat since July

The chart reads 4,947 domains in June, 6,187 in July, 6,263 in August, 6,104 in September and 6,382 in October. The June to July step reflects changes on our side, both the domains we cover and the signals we detect NoFraud with, and the set of domains we crawl turns over every month as dead sites drop out and new ones are added. Since July the line has held between 6,104 and 6,382. 1,439 domains dropped NoFraud between 16 March 2026, when we began tracking removals, and October; 198 of the domains that dropped it still run it on another hostname. 68 of today's domains, about 1%, show a closed or not-yet-open Shopify store page.

"Every NoFraud address we could read named the store's own account. Sift's and Riskified's counts needed 10,605 and 618 platform pages taken out; NoFraud's needed none." - David Thomson, CTO at TechnologyChecker.io

Sales signal: this is a steady pool. Pitch on fit, and expect a few hundred stores a quarter to cycle in and out.

Who the customers are

55.2% of matched companies with a known size have 1 to 10 employees and 28.49% have 11 to 50. Only 23 have more than 1,000. The big names are often a side store: Dave & Buster's sells merchandise through it, Shake Shack its branded goods, AVI-SPL its equipment shop. Toys"R"Us, Burton and Nine West run it on their main store. Age points the same way: 47.4% were founded in the 2010s, the decade direct-to-consumer brands built on Shopify. Wyllo's own customer stories feature Everlane, OluKai and Credo Beauty; Everlane is in our table and loaded the script when I checked.

Sales signal: the buyer is the founder or the head of ecommerce, often one person. They chose an app with a free tier and a flat monthly guarantee, so a long procurement cycle will lose them.

Where they sell, and what

The United States has 1,432 matched companies, Canada 130, the United Kingdom 109 and Australia 68: 1,739 of 1,981, about 88%. By industry the three retail labels cover 35.64%, with Wellness and Fitness Services at 6.47% and Manufacturing at 6.07%. The list reads like a shoe and apparel directory: Nine West, Stride Rite, Rockport, Earth Shoes and Shoe Station, then beauty (bareMinerals, Laura Mercier, ILIA) and outdoor gear (Burton, TYR, Benchmade).

Sales signal: footwear and apparel brands that pay for fraud screening also deal with sizing returns. That is the abuse problem Wyllo bought Yofi to cover, so expect upsell pressure there.

Second scripts

Our switching table for NoFraud is empty, and the reason is useful. 149 domains run NoFraud and Signifyd today, out of 199 ever seen with both. Forter is on 82 (132 ever), TruValidate on 16 (29) and Riskified on just 5 (14). Most stores seen with a pair still run both, so the pair doesn't pass our test for a switch here, though Signifyd's page counts 22 domains moving each way. Some of that is merchants testing a second tool; most pairs have simply stayed.

"Signifyd is the rival NoFraud actually meets: 149 stores run both scripts today. Riskified shares five." - David Thomson, CTO at TechnologyChecker.io

Sales signal: a store carrying both NoFraud and Signifyd may be evaluating, or splitting orders between them. That is the moment either vendor, or a chargeback-management tool, has a real conversation.

The stack around it

Apple Pay runs on 80.7% of NoFraud domains, Shop Pay on 80.19% and PayPal on 72.12%. Google Analytics is on 66.68%. The apps beside it are small-store apps: Instafeed on 16.06%, Hextom on 7.44%, the Pandectes cookie banner on 4.13% and Code Black Belt on 2.75%. Server-side tracking is thin, with Elevar on 2.05%.

Sales signal: these merchants already pay for a guarantee but run little analytics beyond Google's. Attribution and server-side tracking tools have room here.

What it costs

NoFraud's Shopify listing, checked on 15 October 2026, offers screening free to install: the first screened order starts a 14-day trial, then 100 orders a month are free. Guaranteed plans cost $250, $350 or $450 a month, or 1%, 1.25% or 1.5% of revenue if that is higher, for $500, $1,000 or $2,000 of fraud-chargeback cover, for merchants under $50,000 a month; larger stores get custom pricing. The app has a 4.8 rating from 163 reviews.

Sales signal: a percentage-of-revenue price grows with the store. A merchant passing $50,000 a month is moving onto custom pricing, which is when rivals get a hearing.

Key takeaways

1. 6,382 live domains, 5th of 32 in Fraud Prevention, and the store accounts are the stores' own.

2. A Shopify app in practice: 98.0% of domains, and 4,392 of 4,494 readable script addresses.

3. Small brands: 83.69% of matched companies with a known size have 50 staff or fewer.

4. Signifyd is the real overlap, with 149 shared domains.

5. The company is now Wyllo, but the script still says NoFraud.

How to use this list

Filter by country and size, then group domains by store before you count accounts: 4,494 domains map to 3,433 stores. For the full list of 6,382 NoFraud domains with company, size and stack data, explore TechnologyChecker.io, and compare it with the Fraud Prevention category.