How can I prevent daily bot attacks on my ecommerce site?

[Fifig]

Hello everybody! I have reached out before and am getting more and more annoyed and desperate! Every day I get up to 50 bot attacks on the site. They come and put items in the carts  individually. I have asked before and was badly advised by Shopify to use certain apps which don’t work as the bots can’t be detected at the time they visit( don’t show up as in the shop) has anyone had the same experience? This has all escalated in the last 3/4 months. They seem to be targeting Shopify users. I’m really annoyed and frustrated with Shopify’s lack of action here and seems to be a way to try to get users to upgrade to Shopify plus which does protect against this. I will have to consider moving platforms if this issue isn’t addressed by you guys!!!😒

[PaulSL]

Hi, if you look at the abandoned carts, are they all "John Smith" type names? If it is, it's Google checking the prices you're sending to Google Shopping.

https://ppcprotect.com/blog/paid-search/googlebot-shopping-cart/

[fmwebs]

fake73846@fakemail.com

[Shay]

Hi @Fifig 

Thank you for sharing your concerns about the bot activity on your store. I know that receiving a lot of AI traffic on your store can cause your analytic data to fluctuate and be difficult to track. I wanted to clarify some information about the "Bot Protection" offered on Shopify Plus, as I don't believe it is the same functionality that you are referring to.

Shopify offers bot protection for stores on our plus plan that is designed specifically for automated bots that target flash sales and high priority product releases and complete multiple purchases on behalf of the bot owner. There is a diverse market for these applications online and the technology we offer to our Plus merchants is for those situations specifically. Even our Plus accounts have regular bot traffic on their store and there is no way to really stop it.

Bot traffic is normal and it is not an attack on your business in most cases. We would refer to a bot attack as an attempt to crash a store's server by flooding it with fake traffic (100,000's of bot sessions in a short period of time). We have measures in place to stop that type of situation from happening and our security team actively monitors for those situations. What you are describing is totally normal bot created traffic to your store. Other then the inflated analytics, did you have any other concerns about the security of your store?

[fmwebs]

How can I turn the bot protection on 

[jkenler]

Copy of post from related thread: 

Same sort of issues here. Hundreds to thousands of fake customers being created and "abandoning their carts". We get a couple batches every day. I've tried support multiple times and they admit this is a known issue that shopify developers are working on. Then they suggested anti-fraud 3rd party apps, but when i've tried those and talked to those app developers, the common issue is that they only work with Shopify Plus stores because they need access to the checkouts.liquid file in order to inject protection. Without access to this liquid file, it also appears that manually implementing a honeypot is not an option.

After a couple rounds with this, it was suggested that I try IP or country blocking apps, however, when I asked how I could determine the offending IPs  or even countries, shopify support told me that data was not available to us for customers, but only if they successfully completed an order. Strike two.

These fake customers and cart abandons are causing havoc in our analytics and because we integrate with hubspot I am having to manually purge batches of contacts and deals from there to avoid those analytics being ruined.

Looking around in this community hub, there are related conversations going back at least 2 years. Seems like this issue needs some additional prioritization attention!

[apps-developer]

to keep bots away from your Shopify store, consider using an app like "Kedra Shield: Website Security." It offers bot protection and options to block certain countries and IPs. Learn more here: https://apps.shopify.com/kedra-shield-website-security