Is this email about a Shopify tax survey legitimate or a scam?

[starchaser888]

Hi,

I received this email this morning and am not sure if it is real or not.

Shopify.MailID:1-1.63724317.11454397.0037cc6667725be3cce1c79d64cdacea

From - research@email.shopify.com

Email reads:

We’d love to get your thoughts on Shopify Tax as well as our other tax services! Please take a few minutes to share your feedback.

As a thank you for your time, you will receive a $10 USD Shopify subscription credit for completing the survey.

Please note, this survey will be open until Friday, November 18th at 11:55 PM ET.

Just want to be safe with my account

TIA

Jeannie

[Emily · Accepted solution]

Hi, @starchaser888.

Thank you for reaching out! 

The email research@email.shopify.com is a legitimate Shopify email that you can open safely. It is a great idea to check with us as spam emails can get sent to you from an unknown sender. However, this specific email is from us. 

Please let me know if you have any further questions! I would love to learn more about your business. What type of products do you sell? 
 
Talk soon, 

[Emily · Accepted solution]

Hi, @starchaser888.

Thank you for reaching out! 

The email research@email.shopify.com is a legitimate Shopify email that you can open safely. It is a great idea to check with us as spam emails can get sent to you from an unknown sender. However, this specific email is from us. 

Please let me know if you have any further questions! I would love to learn more about your business. What type of products do you sell? 
 
Talk soon, 

[starchaser888]

Hi,

I got another survey but the email is a little different from above it's research@em.shopify.com again is this legit? If it is I wish they would use the same email so we know.

Thanks

[Emily · Accepted solution]

Hey, @starchaser888. 

Thank you for reaching out again!

research@em.shopify.com is a legit email address sent from Shopify. Thank you for double-checking with us!

[sshige2130]

Is email@email.shopify.com a valid Shopify Email domain?

[Emily]

Hi, @sshige2130.

Thank you for reaching out! 

I do not believe that is an email from us. Thank you for checking. 

Take care,

[TimFreet]

@Emily  you said above that "I do not believe that is an email from us".

---

@sshige2130 wrote:

Is email@email.shopify.com a valid Shopify Email domain?

---

But earllier on the thread you said "The email research@email.shopify.com is a legitimate" as this is on the same domain as the legitimate email and just has a different mailbox/alias it seems odd it too isn't legitimate?

I'm asking because Shopify needs a way to show users the emails are from them due to the huge problems with spamming/phishing. I would suggest Shopify include a shared secret in their email that only they and that each specific customer know - similar to the way we have a known secret we give to developers, that being a collaborator request (access) code. You need a secure communications verification code.

[sshige2130]

Hi Emily,

We received another email we are not sure about: support@shopify-messaging.com . Subject Line: Support: You have a report to clear!

Can you confirm if this is legitimate or not? It comes across as a phishing attempt. 

[Greta]

Hi, @sshige2130!

Thanks for reaching out. That does not appear to be a legitimate email from Shopify. 

To have this email reviewed further, we ask that you share it to our Safety inbox along with the email Header information. Email headers are a part of the email code that includes sender details, allowing us to determine the email's source and report it to the appropriate parties if it is a phishing campaign. To do so, you can follow these steps:

1. Obtain the Email's Headers
   • See MX Toolbox’s guide for Getting Email Headers
   • Select your email service provider on the left-hand navigation
   • Follow the steps outlined there to download a copy of the .eml file or copy the email's source code and paste it into a text file
2. Attach the file to the email you received and forward it to safety@shopify.com

Thank you for doing your part to keep the Shopify community safe! 

[unatelier]

I clicked on an email from this same address. what should I do please? this is the email. Thanks!