To add to this list, we are also having the same issue.
It is not the contact form, in fact our site is extremely simple.
This is the Account Registration form. I deleted 41 accounts where the names were gibberish and the emails were real people.
Shopify - if you don't take care of this issue, domains will start to auto-block any notifications coming from the *.shopify.com address, including registration and sales emails.
Add my company to the list unhappy Shopify customers wanting a resolution. This is clearly a known issue, but it's not clear Shopify is taking seriously. When I asked Shopify support about it a few weeks ago, they suggested Captcha on our registration form. We tried that but the bot fake accounts kept coming. So we disabled the form, still they kept coming. I contacted Shopify Support again and asked them to identify the source. They responded that the bots are coming through Shopify API, and in an apparently rehearsed response, said essentially it's minor issue that we just have to deal with. Specifically, the tech said this: "Our aim is to prevent bot sign-ups, but bots are a part of the online (internet) reality and are constantly changing their behaviour so recognising this behaviour is not as straightforward as we would like it to be. However alarming the constant spam accounts might be, this has no material impact on your business as checkouts can't be completed by bots." This is an unacceptable response, and this DOES have a material impact on our business: littering our interface and reporting, spurring fake accounts elsewhere in our connected apps, and wasting employee time working to remove them via the cumbersome “remove personal data” process (the only way to really remove the fake accounts). Even if this were a mere minor annoyance to our business, this is a real security concern for the people whose stolen email addresses are being injected into our records without their permission (the accounts may be fake, but the email addresses within them are real). And as others have noted on this thread, the automated account completion email Shopify sends out is going to get our domain blacklisted as a spammer.
Shopify, if you are paying attention to this thread, please prioritize and fix this problem.
I have just been on to support. Here is the transcript. They are "aware" and trying to develop a solution.
I'm also encountering this problem, which started occurring for my website on 11th October.
Every day since then I need to delete a dozen or more of these fake customer accounts which have gibberish account names but real email addresses.
The concerning thing is that all of the real email address owners are getting an auto generated Customer Account Welcome email from my email address which they should not receive at all as they personally did not sign up - the bot who stole their email address did.
I have asked Shopify to disable the auto generated Customer Account Welcome email as I don't want it to go out at all while this issue exists, but they refuse to disable that email. They say it is a mandatory automatic email that goes out on account creations.
I understand that they are having great difficulty fixing this bot account creation issue, but it should be a really simple fix for them to allow shop owners to control whether or not they want the automatic email sent out on a new account creation.
I have received several notifications that my emails are being detected as spam and am very unimpressed that this is due to a problem that Shopify refuses to either acknowledge or care about.
Shopify also seems to be not comprehending the real issue , as many of their responses refer to what to do about the Contact form - the issue here is nothing to do with the Contact form it is the Account Registration form that is being targeted by the bots.
Shopify please look into this and listen to what the real issue is here.
|an hour ago|