How To Stop Spam Bot Registration??

Tourist
12 0 2

Same issue here, over 2 weeks just spent ages deleting over 500 fake accounts.  Shopify keeps pointing me towards overpriced 3rd party apps (bit suss?).  The program is at their end, they need to protect it not us. starting to wonder if this is on just an upselling ploy.  Promoted as a safe and secure site, yet cannot protect against sign up bots?  Please keep this thread going until Shopify fixes it at their end once and for all.  

1 Like
New Member
3 0 0

The bots found my website about a week ago, so I guess I should be thankful they stayed away this long.  I was about to hire a Shopify Expert to implement a Captia widget but, reading this thread, it seems that solution does not work.

Curious if there has been a permanent solution?  Third-party or not.   Or, are we still waiting on Shopify to own the problem.?

0 Likes
Shopify Partner
9 0 3

Hey Chris,

I agree it can be very frustrating to deal with bots creating fake accounts and/or submitting bogus contact or newsletter signup form requests on your store.  Have you tried the Shop Protector app yet?  Hundreds of users have had great success with this app and it doesn't use Captcha or any other type of Turing test so it's invisible to your users.  We have a 14-day free trial if you're interested:  https://apps.shopify.com/ellipsis-human-presence-technology

Best of luck.

0 Likes
Tourist
7 0 2

I can attest to the fact that the app John is promoting does indeed work. Im still pissed i even need to use it but at $5 (IIRC) its worth it to me. 

0 Likes
Shopify Expert
9778 86 1524

Just to reiterate, any decent bot will skip apps like the one mentioned above. Set expectations accordingly. What might work for some, may not work for all.

★ Winning Partner of the Build a Business competition. ★ http://freakdesign.com.au
0 Likes
Tourist
12 0 2

Have been onto Shopify Support for the third time in as many weeks.  Each time I am pushed to paying for third party apps.  Today I asked why external developers are able to create simple apps which claim to prevent these bots, but Shopify’s Experts cannot.  Was told that Shopify ‘focuses on making you successful and making it easier for you to sell your products’.  Asked why Shopify does not think that protection from external threats such as bots, viruses and trojans would be seen by as a serious issue that directly impacts on our ‘success’.  Then given the answer that ‘So you see, ecommerce is a fast paced changing world. Our developers make sure that we prevent those bots from signing up. But as time goes by these bots change as well allowing them to sign up.’ Yet the external developers are able to do this (for a fee!).  I am very concerned if Shopify cannot protect stores from Signup bots, how can it protect our customer’s data and personal details (including banking) from external threats which have a more sinister aim rather than just being ‘annoying’?

Has anyone else received emails from these fake customers, I deleted about 5 today?

I hope everyone who is having this issue is onto Shopify Support on a daily basis until they fix this issue.

0 Likes
Tourist
7 0 2

Totally agree Matkai. however, I got to the point that it became worth paying the $5/mo to save me deleting hundreds of fake accoutns each week and having those emails clog up my email list.

Jason, what is your suggestion then?

0 Likes
Tourist
12 0 2

If an external developer can create an app to fix this issue, why can't Shopify's Experts do the same?  All this proves is that it can be fixed and that Shopify does not want to fix it, at least not in-house, I wonder why????

 

1 Like
Shopify Expert
9778 86 1524

Jason, what is your suggestion then?

Apps and custom code won't stop spam bot registrations. They certainly may help, but it's important to have proper expectations set.

For those getting hit with small time bot attacks these can be approaches worth looking into:

  • default bot protection shopify gives
  • custom theme code, with a variery of approaches. I can talk more about those in more specific if people are interested
  • apps - that either automated the addition of the custom code I'm hinting at above, or that process the data elsewhere first. The app noted a few posts up takes the latter approach.

Why apps or custom code is not a 100% bulletproof approach is that the endpoints for registration/contact are public. This means you can post code to those urls directly skipping any code/tool you have in place.

For apps processing the form elsewhere they can be skipped entirely. More sophisticated bot attacks will not use the actual form for data posting, and they will also have a series of detection processes in place - like IP cycling.

The approach for those here would vary based on the issue you're facing.

★ Winning Partner of the Build a Business competition. ★ http://freakdesign.com.au
0 Likes
Excursionist
91 1 7

Hi Jason,

I've been getting fake accounts, easy to identify because both first name and last name are the same and the email ends in @mail.ru I have tried add ind javascript to the registration process but after reading what you said it's obvious that the bots aren't even seeing that page.

Any ideas what we can do?

Is it possible to let them setup the account then automatically delete it if it has the credentials i mentioned above?

alternatively is there a way to say that the account can only be setup if the request came from my stores  register url?

Cheers

 

Timmo. 

 

0 Likes