okay

http://bouncing.org/WorldPay_ZC1.3.x_v2.02.zip

Now that should work if WorldPay is following it's own instructions. The Documentation states that if there is no warning or caution then a value will not be set, but there is a possibility that the value is set to something like "waf.Harmless" in which case, it's going to still email the shop owner.

If it does it again, then just run the debugging (doesn't harm a live site) and look to see if wafMerchMessage exists in the debug email, if it is there then I need to know the value, if it's not I'll need to rty and figure what's setting the email alerts off but not the warning signs on the worldpay page.

Philip.