Shopify Spam Customer Accounts with Real Email Addresses

Solved
Highlighted
Pathfinder
98 1 17

@Jim_Harger1 

Hi Jim, thanks for the above. Would a one liner saying, "Note: if you did not sign up for the account indicated in this message, please inform us." serve this purpose? Ours is now underneath the Disclaimer, in smaller print. Whoever/whatever is organizing these sign ups would not need email passwords to register new customers, would they? All that is needed is a list of email addresses, right?   

TTL CIC - - a Company limited by guarantee with charitable objectives.
0 Likes
Highlighted
Excursionist
12 0 13

@TakTogLon wrote:

@Jim_Harger1 

Hi Jim, thanks for the above. Would a one liner saying, "Note: if you did not sign up for the account indicated in this message, please inform us." serve this purpose? Ours is now underneath the Disclaimer, in smaller print. Whoever/whatever is organizing these sign ups would not need email passwords to register new customers, would they? All that is needed is a list of email addresses, right?   


I'm just guessing what the purpose of these fake account might be. Maybe their some how testing these accounts to try and gain access to them. Also what's the purpose of asking someone to go to the trouble to reply? That requires effort on their parts and one should never reply to spam.

1 Like
Highlighted
Pathfinder
98 1 17

@Jim_Harger1 

 

 Also what's the purpose of asking someone to go to the trouble to reply? That requires effort on their parts and one should never reply to spam.


Realize that, but how can we confirm that we will delete their account without their permission? Maybe should state something like: "It looks like this account was not created by you and we will delete it if we do not hear from you." ?

TTL CIC - - a Company limited by guarantee with charitable objectives.
0 Likes
Highlighted
Pathfinder
98 1 17

@Jim_Harger1 



I'm just guessing what the purpose of these fake account might be. Maybe their some how testing these accounts to try and gain access to them. A


The purpose could be anything ... It is damaging to customs taken for granted, like not using others' email addresses to subscribe them without their permission, on which ecommerce rests.

TTL CIC - - a Company limited by guarantee with charitable objectives.
0 Likes
Highlighted
Excursionist
12 0 13

@TakTogLon wrote:

@Jim_Harger1 

 

 Also what's the purpose of asking someone to go to the trouble to reply? That requires effort on their parts and one should never reply to spam.


Realize that, but how can we confirm that we will delete their account without their permission? Maybe should state something like: "It looks like this account was not created by you and we will delete it if we do not hear from you." ?


It's pretty certain that it is not their account if the user name is a string of random numbers and letters and there's no other information filled in.

1 Like
Highlighted
Pathfinder
98 1 17

Hmm. Can't be so sure. Don't know what the legal view is. Would have to ask someone qualified in law or do research, to feel safe. Wonder if there is someone who is an expert in legal matters pertaining to ecommerce on this forum?

 


@Jim_Harger1 wrote:

@TakTogLon wrote:

@Jim_Harger1 

 

 Also what's the purpose of asking someone to go to the trouble to reply? That requires effort on their parts and one should never reply to spam.


Realize that, but how can we confirm that we will delete their account without their permission? Maybe should state something like: "It looks like this account was not created by you and we will delete it if we do not hear from you." ?


It's pretty certain that it is not their account if the user name is a string of random numbers and letters and there's no other information filled in.


 

 

 

TTL CIC - - a Company limited by guarantee with charitable objectives.
0 Likes
Highlighted
Shopify Partner
27 0 35

@TakTogLon Legal view for what? Deleting someones account? Needing their permission? Lol?

 

You can delete, ban, abuse, whatever or whoever you want with your own website, you do not need permission from anyone to delete your own data. 

 

 

1 Like
Highlighted
Pathfinder
98 1 17

Hi @Alex_Russell   Firstly, that's not completely true. Shopify advises us not to delete customers who have orders - for accounting and tax purposes.

Secondly, what we would be doing with the suggested text is telling a customer we are deleting their account, which we suspect is fake and bogus, without giving them a chance to respond - and that's the problem.  That's why I'm using a slightly altered and shorter text with a conditional clause.

 


@Alex_Russell wrote:

@TakTogLon Legal view for what? Deleting someones account? Needing their permission? Lol?

 

You can delete, ban, abuse, whatever or whoever you want with your own website, you do not need permission from anyone to delete your own data. 

 

 


 

TTL CIC - - a Company limited by guarantee with charitable objectives.
0 Likes
Highlighted
Shopify Partner
27 0 35

@TakTogLon Shopify advised you! oh noes!

 

Again, you can delete customers or anything you want from your website. Retaining tax invoices and accounting records is a completely different issue, unrelated to the existence of the users account. You were also implying you wanted to delete accounts of possible fake signups, which would also imply they have no orders on record, so deleting those accounts shouldn't be a concern by your own logic?

 

 

1 Like
Highlighted
Pathfinder
98 1 17

@Alex_Russell 

 

In the UK I'd be careful about the wording when informing people that they might have been registered for a 'fake' or 'bogus' account, which we are then going to delete.

 

To be clear: I agree with the idea. It's the wording that requires legal advice for us, which we will need to get here. I don't know how it works in other countries or the US.

 

 


@Alex_Russell wrote:

@TakTogLon Shopify advised you! oh noes!

 

Again, you can delete customers or anything you want from your website. Retaining tax invoices and accounting records is a completely different issue, unrelated to the existence of the users account. You were also implying you wanted to delete accounts of possible fake signups, which would also imply they have no orders on record, so deleting those accounts shouldn't be a concern by your own logic?

 

 


 

TTL CIC - - a Company limited by guarantee with charitable objectives.
0 Likes