Cash on delivery is a payment method where the buyer pays when the order is delivered rather than at checkout. It is often used in markets where trust, card penetration, or payment preferences differ from Western eCommerce patterns. Merchants must account for its effect on conversion, fulfillment, and payment risk.
How Cash on Delivery Works
Cash on delivery is a payment method in which the buyer pays when the order arrives, rather than paying at checkout. That shifts the payment moment from the online transaction to the delivery handoff, so the merchant must coordinate fulfilment, cash collection, and order completion as one connected process.
The buyer experience is simple, but the business workflow is not. A COD order can look like a confirmed sale before payment has actually been received, which makes it different from card-first checkout flows where payment authorization happens earlier in the journey.
Why Merchants Offer Cash on Delivery
Merchants often use COD where customer trust in prepayment is low, where card usage is limited, or where local buying habits favour payment on receipt. It can remove a checkout barrier and make first-time purchases easier, especially in markets where consumers prefer to inspect goods before paying.
That convenience comes with a trade-off: the merchant takes on more uncertainty. Because payment is deferred until delivery, COD can increase abandoned deliveries, rejected parcels, and the cost of completing an order that never converts to revenue.
Operational Implications for Fulfilment and Revenue
COD changes more than payment timing. It affects warehouse pick-and-pack decisions, courier instructions, reconciliation, returns handling, and customer service processes. A merchant needs visibility across each stage so that “shipped” does not get mistaken for “collected.”
It also affects how sales are measured. Conversion may improve at checkout, yet net revenue can still suffer if delivery acceptance is poor or if cash collection is slow and error-prone. The business value of COD therefore depends on both customer demand and operational discipline.
When Cash on Delivery Is the Better Fit
COD is usually most useful when the purchase context makes upfront payment a friction point. It can be a sensible option for cross-border selling, lower-trust environments, or categories where customers want reassurance before committing funds. For some merchants, it is a market-entry tool as much as a payment method.
It is less attractive when the business model depends on fast settlement, low return rates, or tightly controlled margins. In those environments, COD can add cost and complexity without enough offsetting benefit, so merchants need to judge whether the increased accessibility is worth the operational overhead.
Risk and Threat Considerations
Cash on delivery creates exposure around non-collection, cancelled deliveries, cash handling errors, and fraud. The merchant extends fulfilment effort before final payment is settled, so every failed handoff or false order can become a direct revenue loss.
Failure mechanism: The order is fulfilled and dispatched, but the buyer refuses delivery, cannot be reached, or disputes the transaction at the doorstep, leaving the merchant to absorb shipping and handling costs.
Impact: High COD failure rates can distort sales forecasts, increase reverse-logistics cost, slow cash flow, and create a larger operational burden on customer support, courier partners, and reconciliation teams.
Standards & Framework Alignment
This section maps relevant standards and security frameworks to the operational risks and controls described in this guidance.
OWASP SAMM and NIST CSF 2.0 set the governance and control requirements practitioners need to meet.
| Framework | Control / Reference | Relevance |
|---|---|---|
| OWASP SAMM | Software Assurance Maturity Model | COD changes order-handling and fulfilment workflows that should be governed in delivery maturity. |
| Recommendation — Assess fulfilment and payment handoff controls in the delivery lifecycle. | ||
| NIST CSF 2.0 | GV.RM-01 — Risk Management Strategy | COD introduces payment, fulfilment and cash-collection risk that should be governed as a business risk. |
| ID.RA-01 — Asset Vulnerabilities Identified | COD requires identifying exposure in cash collection, courier handoff and reconciliation processes. | |
| Recommendation — Set risk appetite for COD losses, returns, and settlement delays. Identify COD failure points across fulfilment and settlement. | ||
Practitioner Guidance
Why practitioners should care: COD should be treated as a payment-risk and fulfilment-control decision, not just a checkout option. Merchants need clear rules for when to offer it, how to verify orders, and how to reconcile cash collected against dispatched orders.
Governance implication: The safest COD programmes define acceptance criteria by market, product value, and fulfilment reliability, then monitor rejection, return, and settlement rates so the channel does not quietly erode margin.
Related resources from NHI Mgmt Group
Deepen Your Knowledge
Free weekly newsletter
Subscribe to the NHI & AI Identity Journal
The latest on NHI and Agentic AI security – articles, research, breaches, news and events every week.
Bonus 33% off our NHI Course when you subscribe.
Reviewed and updated by the NHIMG editorial team on October 30, 2026.
NHI Mgmt Group — the #1 independent authority on Non-Human Identity, IAM, and Agentic AI security. nhimg.org