Cash on Delivery

The problem

Magento's free cash on delivery method has no fraud control at all, which means every fake or mistyped order becomes a courier fee spent twice, once out and once back. Store owners running COD in markets where it is the dominant payment method need a way to catch bad orders before a courier ever leaves the warehouse, and B2B accounts who collect in person and pay at the counter need a different, lighter version of the same idea.

Two channels, one payment method

Doorstep delivery and pay-in-store-at-pickup are handled by the same nextbyte_cod payment method but with separate rules underneath. Pay in Store is only offered on a collect-in-store style shipping method, detected by carrier code with no hard dependency on any specific pickup module, and only to signed-in customers in approved groups, since a wholesale account is not the fraud risk an anonymous doorstep order is. OTP verification is skipped for it entirely.

Verification and blacklisting

Before a doorstep order can be placed, the shopper confirms a one-time code sent to the phone number on the order, through a pluggable SMS gateway interface rather than a single hardcoded provider. A phone number that keeps failing verification, or a customer whose deliveries keep coming back returned to origin, gets blocked automatically once a configurable threshold is crossed, so a merchant does not have to notice the pattern by hand.

The booking deposit

Magento ties exactly one payment method to one order, so a single order genuinely cannot split into "card for the deposit, cash for the rest." Rather than faking a partial charge inside one order, the deposit is its own small, completely ordinary order for a single deposit product, checked out through Magento's real checkout against whichever payment methods the merchant allows. It links back to the Cash on Delivery order it secures and refunds through a normal credit memo if the refund policy allows it.

What you get day to day

The result is a doorstep COD channel that filters out the orders most likely to fail before a courier is dispatched, a pay-in-store channel built for the trade accounts who actually want it, and a cash reconciliation console that shows exactly what every courier is holding and when it was handed over.