Is this an email scam? "Your app has been marked for review"

[JohnB2]

Hi.

I received an email from a group using a gmail address claiming that my store will be deleted if I don't update the "Security Headers" and "robot.txt" file. I've been using the free "Simple" template for the store and there's no mention of this in all this time. The group claims to be a Shopify partner yet use the email address shopifyteam142@gmail.com which I thought was suspicious.

I queried them and got this response:

"Here are the the concerns that we've identified your Shopify store that require attention to avoid deactivation. Below are the key issues:

1. Missing Security Headers:
Our analysis found that your store lacks essential security headers, including Permissions Policy and Referrer Policy headers. These headers protect your store from security threats, data breaches, and potential damage to search engine rankings and sales.

2. Errors in Theme's Robots.txt File or Layout:
A bug was detected in your theme's layout, impacting user experience and potentially affecting sales. Resolving this issue will enhance your store's functionality and appearance.

These are basically the issues that your store has been facing. To ensure your store's compliance and security, would you like to proceed with addressing these issues?

Best regards
Kendra | Shopify Technical Support"

The claim is that they can solve the problems by coding for a fee of $95USD OR they will help me if I purchase a Shopify theme for several hundred dollars.

Frankly it just doesn't smell right. Using a gmail address and essentially extorting a fee to use a free template doesn't sound right. Are they connected with Shopify or just an impressive sounding scam?

Thanks in advance.

[JohnB2]

If they are a scammer I presume I can simply ignore them.

[JohnB2]

Actually I'm about to redesign the store. I'm currently collecting artwork and photos.

[DesignbyEmmy]

Hello John,

This message appears to be a potential scam, as legitimate communications from Shopify regarding your store should include a verified checkmark. 

Best regards. 

[CafeDelMar]

It’s the right thing to do. Not to mention that a decent webmaster would never stoop so low as to try getting clients with scammy tactics.

[Laza_Binaery · Accepted solution]

HI @JohnB2 

Absolute scam, no connection to Shopify (anyone can use Gmail and claim to be anyone). If you search here or Google you will find hundreds of similar topics. But the same idea to scam you. You should report that email to Shopify; again search for how to report them. 

Also watch out for "experts" that will "help you out" doing the same thing like those scammers, take money for nothing.

Stay safe.

[JohnB2]

Thanks everyone for the replies. I thought it was after reading other, similar posts and seeing the constant "Shopify will never use a Gmail address" replies. But it's still good to ask and make sure.