Is this a scam?

[Tcgpanda]

Hello I got this email from shopifystoreaudit@gmail.com

is this a real email or a scam

Dear Value store owner

 We have recently conducted an audit of your store and identified two critical issues that require your immediate attention:

Unlicensed Theme Usage: It appears that your store is utilizing a theme that has not been properly licensed. Using unlicensed themes is a violation of Shopify's policies and can result in serious consequences, including the potential suspension of your store. To avoid any disruptions to your business, we urge you to verify and rectify your theme license status as soon as possible.

Robots.txt Errors: Our audit has also detected errors within your robots.txt file. These errors can hinder search engines from properly indexing your site, leading to significant drops in search visibility and organic traffic. In severe cases, these errors can contribute to site malfunctions, which could jeopardize your store’s online presence and performance.

Thank you for your prompt attention to these matters. We look forward to your cooperation in ensuring that your Shopify store remains compliant and operates smoothly.

Best regards

Shopify errors detector

[Moira]

Hey @Tcgpanda,

As @Unique_Horlart mentioned, this is not an email from Shopify.

These reminders are always good to have, as it's very easy to just assume the email is real when they look so legitimate. For anyone that is concerned that they have engaged with a phishing/fake email pretending to be Shopify I wanted to share the best next steps for you to take:

• You can forward any phishing messages that you receive to Shopify's safety inbox at safety@shopify.com.
• Log in to the email account that you use to log in to Shopify and change the password.
• Log in to Shopify and change the password for your Shopify account. If you can't log in, then reset your password. If you don't receive a password reset email, then contact Shopify Support.
• Do either of the following:
  • Activate two-step authentication for extra security when you log in.
  • If two-step authentication is already activated and an attacker was able to defeat it, for example, they stole your device, then you need to remove the authentication method for that device, and then set up two-step authentication again for a different device.
• Check your banking details for Shopify Payments and update them if necessary.
• Check and update your banking details for PayPal and any other payment providers you have configured.
• Review your general account settings to make sure that all other information is correct.
• Follow government guides to protect your identity and sensitive information.

To access our authenticated support, please follow this link: Shopify Help Center. Our live chat is available 24/7 to help you with any questions you have. If you are not able to sign in, then let the AI chat bot know that you can't access your account and follow the prompts to continue getting support. 

[Kate_WSQ]

Hi @Tcgpanda ，

This email seems suspicious to me. Genuine Shopify emails should not come from a Gmail domain (@gmail.com). For instance, community emails are sent from @mail.community.shopify.com, and store notification emails come from @shopify.com.

I hope this helps.