A product recall for a small brand: the first 72 hours, end to end
A product recall procedure for a small brand: stop sales, bound the affected orders, notify customers, report, remediate — the first 72 hours, in order.
InventoryX is in development and not available today. ClearStock is the live Shopify app.
A recall is not a customer-service problem, and treating it like one is the most expensive mistake a small brand can make. The reflex — reply to the customer who reported the failure, apologize, look into it after the weekend — spends your scarcest resource on the wrong clock. A product recall runs on two clocks: a federal reporting clock measured in hours and a customer-contact clock measured in days. Here is the first-72-hours sequence for a Shopify store: stop the sale, bound the affected orders, contact customers, report, remediate. This is an operator's playbook, not legal advice — the moment a hazard looks real, a product liability attorney joins the conversation early.
Hour 0–2: stop the sale
Everything else waits for this, because every hour the listing stays live is another order you'll have to unwind.
- Unpublish the listing. Set the product to Draft so it leaves the storefront while keeping its order history intact — the mechanics of draft, active, and archived states are covered in the product status guide.
- Pull the traffic. Pause scheduled emails, ads, and social posts that point at the product. A drafted listing doesn't stop an already-scheduled campaign.
- Hold unshipped orders containing the SKU — pull them out of the pick queue before they ship.
- Quarantine physically. Move remaining stock to a marked bin pickers can't grab. Recalled units never restock, no matter how good they look.
The asymmetry that should drive the pace: it costs you almost nothing to unpublish a listing you were wrong about, and it can cost everything to sell one more unit of a hazard you'd been warned about.
Day 1: bound the affected population
The clean way to know which units are bad is lot tracking — production batches tied to receipts and orders. Worth reading about if your category carries real hazard risk (what lot tracking is, and who needs it). The honest state for most small Shopify catalogs, though: the core platform has no native lot or batch field, and InventoryX (in development) doesn't track lots either — so identification stays procedural. Here's the method that works without it:
- Pin the suspect receipt. Which PO introduced the suspect stock, and when was it received? Your receiving records and supplier invoices give you the date.
- Ask the supplier how far it reaches. Which production batch did that PO draw from? Did earlier or later POs come from the same batch? Get answers in writing.
- Bound by date window. Affected orders = orders for that SKU or variant between the earliest possibly-affected receipt date and today. Include everything — resold returns, gifts, bundled units.
- Export and filter. Export your orders to CSV, filter to the variant SKU, filter to the date window.
Worked bound, illustrative: a RidgeLine no-pull harness, size M. The webbing fray was reported January 6. Records show the suspect webbing lot arrived with PO #1142, received June 12; the supplier confirms the stitching spec changed in a July production run, so everything from PO #1142 onward is suspect. The CSV filter returns 96 orders — 140 units. That's your contact queue, and the same count feeds the reporting step.
Err wider than you think you need. A bounded list that includes ten unaffected customers costs you a polite email; one that misses an affected unit costs you the thing a recall exists to protect.
Day 1–2: contact the customers
A recall notice does four jobs, and the CPSC's recall handbook (cpsc.gov, accessed November 2026) spells out the same structure: identify the product precisely, describe the hazard plainly, tell people to stop using it, and offer the remedy with a concrete way to claim it. Email every affected order. Keep the copy plain — what the product is, what can go wrong, what to do, what you'll make right.
The remedy decision, in order of hazard severity:
| The situation | Remedy | Why | Watch for |
|---|---|---|---|
| Hazard can injure again (structural failure) | Full refund; no return-shipping cost to the customer | Removes the product fastest | Refund without restocking — quarantine returned units |
| Defect fixed in current production | Replace with the corrected version | Keeps the customer, removes the bad unit | Ship the new unit first; prepay the return label |
| A proven fix exists (kit, part) | Repair kit with instructions | Cheapest; keeps the product in use | Only for verified fixes — a failed repair is a second recall |
The 24-hour reporting question
This is the part small brands most often don't know. Under Section 15(b) of the Consumer Product Safety Act, manufacturers, importers, distributors, and retailers of consumer products must report to the CPSC within 24 hours of obtaining reportable information: a defect that could create a substantial risk of injury, a product creating an unreasonable risk of serious injury or death, or noncompliance with an applicable rule or ban. No injury needs to have occurred. The CPSC's own guidance caps a pre-report investigation at roughly 10 working days, and its stated advice is "when in doubt, report" (CPSC Duty to Report guidance, cpsc.gov, accessed November 2026). Failure to report carries civil or criminal penalties.
If you're prepared to recall — you've stopped sale and can commit to a corrective action plan of refund, repair, or replacement — the Fast Track program is the route built for that. It runs through the CPSC's online business portal (mandatory since January 31, 2022), and completing it brings expedited handling, no preliminary hazard determination against you, an assigned CPSC contact, and a system-generated draft press release you review before anything publishes (CPSC Fast Track pages, accessed November 2026).
Which regulator, at a glance:
| What you sell | Likely US regulator | Note |
|---|---|---|
| Pet gear, home goods, most physical products | CPSC | Section 15(b) report; Fast Track available |
| Food, beverages, supplements, cosmetics | FDA | Different recall machinery; check FDA's recall guidance |
| Vehicles and motor-vehicle parts | NHTSA | Rare for Shopify merchants |
Two boundary cases: if you resell another brand's product, you can rely on the manufacturer's report only if you confirm and document that it was filed — otherwise you report too. And this outline is US federal; most markets run an equivalent recall regime, so sell into one and you check theirs.
Day 2–3: remediate, and do not restock
As units come back: refund flows on Shopify return inventory to available stock only if you select restock during the refund (as of November 2026) — in a recall, don't. Returned units go to physical quarantine, then to write-off or destruction with documentation: dates, counts, photos, disposal method. Where that loss lands in the books — write-off versus write-down — is its own accounting question, covered in the write-off guide.
Open the supplier conversation in parallel, with the evidence you already assembled in the bounding step: PO numbers, receive dates, the supplier's own batch confirmations. If the defect traces to their production, the mechanics of getting credit for defective stock are the return-to-vendor playbook.
The tally, illustrative: 96 orders, 140 units — 96 sold through the affected window plus 44 unsold units still on the shelf. Sixty-six customers take refunds at $48 — $3,168. Thirty take replacements: 30 × $11.40 unit cost plus an estimated $140 of return freight — $482. The 44 units in your own stock are destroyed at cost — $502. Direct cost lands around $4,150 estimated, before any supplier recovery, and the bounding and emails took about two working days of one person's time.
After: bring the product back as a new version
Restock only the corrected version, as a distinct SKU with a version suffix so its track record starts clean — the old SKU stays retired. And fix what let it ship: if the failure mode (stitch tension, webbing spec, adhesive batch) could have been caught with a pre-shipment check at the factory or on receipt, the quality control inspection checklist is where that guardrail gets built. A recall you detect at receiving is a supplier claim; one you detect from a customer is everything above.
Common questions
Do small businesses have to report a recall to the CPSC? Yes. Section 15(b) applies to manufacturers, importers, distributors, and retailers alike, with a 24-hour clock from reportable knowledge and no requirement that an injury occurred. Resellers may rely on the manufacturer's report only if they document that it was filed — otherwise they report too.
How do you recall a product on Shopify? There's no recall button. Set the listing to Draft to unpublish it, hold unshipped orders containing the SKU, contact affected customers, and refund or replace manually. Refunds only return inventory to stock if you select restock — in a recall, don't. Identifying affected orders stays on you via PO bounding.
Should I refund or replace during a recall? Default to refund when the hazard can injure again — it removes the product fastest and ends the risk. Replace when the defect is fixed in current production and the customer wants the item; ship the corrected unit first and prepay the label. Repair only with a proven fix.
How do I find which customers received the recalled batch? Without lot data, bound it: pin the suspect PO's receive date, ask the supplier how far the batch extends, export orders for that SKU, and filter to the date window. Err wide — include resold returns and gifts. The worked example above produced a 96-order list in about an hour.
What does a small recall cost? The direct costs are refunds or replacements, freight, and destroyed stock — the illustrative tally above lands near $4,150 for a 96-order harness recall. The unbudgeted cost is time. Fast, complete responses are the part you control, and the CPSC's Fast Track program exists precisely to reward them.
Next step
Write the one-page recall plan while nothing is wrong: five blanks — your hazard-prone SKUs, the PO-bounding rule, a notice template, the default remedy per severity, and who files the report. Bookmark the CPSC Recall Handbook and Recall Checklist on cpsc.gov (accessed November 2026); they're free and they're the source this playbook stacks on. And if recalls are a live risk in your category, the lot tracking guide explains which stores should graduate from PO bounding to real batch data.