Shopify Flow Sanctions Alerts: Notify Your Team Before Fulfillment

To send a sanctions-review alert in Shopify Flow, connect MatchAudit's Order flagged for sanctions review trigger to Send internal email. Include the order reference, reason and review link, then test delivery to the staff responsible for the decision. Flow handles the notification; MatchAudit supplies the screening result and manages its fulfillment holds.

This workflow is useful when your store takes international orders and the reviewer does not watch Shopify admin all day. An alert gives someone a next action. It does not complete the review or establish that the buyer is sanctioned.

Choose the trigger that answers the right question

Shopify's built-in fraud analysis and a sanctions check address different risks. A low fraud rating does not show that every relevant sanctions source was checked. Use the app's dedicated event for this workflow rather than interpreting a generic high-risk order as a confirmed list match.

MatchAudit's review trigger can report a possible sanctions-list match, a country warning, or a check that could not finish. The Reason field explains the cause. Sanctions list match and High risk country let you create separate branches when different staff own those investigations.

For example, route a possible name match to your screening reviewer, and route an unavailable-data alert to the same reviewer with an operational escalation contact. Missing data needs follow-up; it should not be silently treated as an unrestricted order.

Build the internal email workflow

1. Install MatchAudit and Shopify Flow, complete screening setup, and confirm your selected sources.
2. In Flow, create a workflow using Order flagged for sanctions review from MatchAudit.
3. Add Send internal email and enter the responsible staff mailbox. Use a monitored address with a named backup.
4. Insert the order reference, Reason, Matched lists, Review link and Fulfillment on hold using Flow's variable picker.
5. If you use manual payment capture, include Authorization expires so the reviewer can prioritize time-sensitive cases.
6. Save, activate and run a controlled test through the complete workflow.

Shopify documents Send internal email as a staff-notification action. The recipient address is configured explicitly rather than dynamically from a customer variable. Keep the message focused on the action staff need to take.