Two is a sequence. Four is a maze.
The working shape is one bump, one upsell, and one downsell that only appears after a decline. That is two decisions after payment, which is about as much as a fresh customer will spend before delivery has earned anything back.
A second upsell is defensible once the first has enough volume to have taught you something, and it comes with two conditions: it must be for a different job rather than a larger version of the first, and it should be priced below it. After an accepted upsell the limit is fatigue rather than logic. After a declined one, the only legitimate next screen is the single downsell, and then the receipt.
Draw every path before you build one
Each accept-or-decline doubles the number of endings, and every ending has to deliver the right access with the right emails. This is the part that breaks in production, almost always on the path nobody tested.
| Path | What they own | What must be true at the end |
|---|
| Core only | The core offer | Receipt, core access, core onboarding, and removal from every campaign still selling the core offer. |
|---|
| Core + bump | Core offer and the bump | One receipt showing both lines, both items delivered together, and no separate onboarding for the bump. |
|---|
| Core + upsell | Core offer and the upsell | Receipts for both, access to both, the upsell’s own first step, and suppression from anything that sells the upsell again. |
|---|
| Core + bump + upsell | All three | Everything above at once. The path most often left untested, and the one where duplicate onboarding emails usually surface. |
|---|
| Core, upsell declined, downsell taken | Core offer and the downsell | The downsell’s access and onboarding, and no further offer of the upsell for a stated period. |
|---|
| Core, both declined | The core offer | Identical to core-only. A buyer who declined twice must not land somewhere worse than one who was never asked. |
|---|
Two rules make that table survivable. Every path terminates at a receipt and correct access — no exceptions, including the ones where somebody declined everything. And anyone who bought something must stop receiving the campaign that sells it, which is a behavioural trigger rather than a weekly cleanup job.
Then test all of them with a real card before publishing, in the order a buyer would meet them, on a phone. The workflow testing checklist covers how to do that without leaving test orders in your reporting.