Spam Emails in the name of Shopify

[Kata8]

In the last weeks I got often Emails from 'Shopify'. 

They are ending on ...(at)gmail.com - so it seems, they are fake. 

I didn't answer on that or something else. 

Below an example. 

Email 1: 

Important Notice: Theme License Compliance Required.

From: Shopify Trust Team <[email protected]>  

Dear Shopify Merchant,

We are reaching out with an important notice regarding your store’s theme license. Our records show that some stores are operating without a valid theme license, which is not in accordance with our Terms of Service (TOS).

To ensure compliance, we will be conducting an evaluation on October 1st, 2024. Please note that stores without a valid theme license will be disabled from the marketplace. Stores with a valid license will remain active and could benefit from increased visibility on Google, which may drive more traffic and sales.

What You Need To Do:

For Free Themes: Please confirm your theme status by replying to this email with the following details:

* Business Name

* Theme Name and Version

* Store URL

For Premium Themes: Kindly submit the theme license you received at the time of purchase for verification.

If your store currently does not have a valid theme license, we encourage you to contact us promptly to avoid any interruptions. The registration and verification process is free of charge.

Thank you for your prompt attention to this matter. We appreciate your cooperation in maintaining compliance with Shopify’s policies.

Best regards,  

Shopify Support Team  

[Laza_Binaery]

Hi @Kata8 

Yeah, it is spam and every day here on the forum there are a few same posts. If you search for "Theme License Compliance shopify" you will see pages and pages. Shopify would never send an email from GMail account.  And these scammers are the worst kind. They engage in chat then say your computer must be hacked, then if access is given they install some spyware and have remote access. Plus install security software with a 300-400 year subscription that does nothing. Note: they always use "Kindly" like, kindly give us all your money. 

Be safe and do not click on any link in emails.

[Kata8]

Hi @Laza_Binaery  

Thank you for confirming my assumption.
I never click on any links ! 

Only wanted to be sure. 

Thank you 

[PageFly-Richard]

Hi,

This is Richard at PageFly - Shopify Advanced Page Builder app.

The email you received is a phishing attempt impersonating Shopify. Here's why:

1. Unofficial Email Address: Legitimate Shopify emails will always come from an address ending in "@shopify.com," not "@gmail.com."
2. Urgency and Threats: The email creates a sense of urgency by threatening to disable your store if you don't respond. Shopify typically wouldn't disable a store without verification and communication through official channels.
3. Unnecessary Information Request: Legitimate theme license verification wouldn't require you to send your business name, theme details, and store URL in an email reply.

Hoping my solution helps you solve your problem.

Best regards,

Richard | PageFly

[JasonH]

@Kata8 

We have been alerted to fraudulent emails from @gmail.com addresses, falsely claiming to raise security or technical concerns about your Shopify store. Please disregard these emails, as Shopify will never use a Gmail, Yahoo, Hotmail, Outlook, MSN, or similar email address. Ensure you do not click on any links or provide any personal information.

To help us investigate, please do not hold back and follow these steps:

1. Obtain the Email's Headers:

   • Refer to MX Toolbox’s guide for Getting Email Headers.
   • Select your email service provider on the left-hand navigation.
   • Follow the steps to download a copy of the .eml file or copy the email's source code into a text file.

2. Forward the email and the header file to [email protected].

Thank you for helping keep our community safe. For any individual concerns or more details, please visit our help page on Protecting your account against phishing, vishing, and smishing.