Shopify allows scammers to set up fraudulent stores under users emails without verification!

[imatexasgal]

Within the past 24 hours, I have received a number of emails at my personal email address stating that a store has been set up under my email, domain name has been changed, payment details have been changed, etc. Apparently this has been happening for months:

https://community.shopify.com/c/shopify-discussions/someone-has-used-my-email-address-to-create-a-fa...

My email itself has not been accessed or used to verify the store, yet somehow Shopify allows these scammers to set up 2 factor authentication that the actual email owner can't access. Moreover, Shopify requires us to set up another account under a different email just to report the fraud. This can't be legal?! Do something Shopify!