It has been over a month with bots or scammers contacting us saying they will take legal action since a charge has been filed on their card or bank account. Upon checking payments we have never recieved any information,email or charges from the names of these customers, We ask to verify details like the charges, amount, bank, card etc to verify if there has been anything we missed but seems like if you respond to these queries we receive a lot more junk email or contact form filings with their email, phone number and a message asking for a refund from the store. We have no prior info or details on these transactions and any screenshots they submit looks like something edited on photoshop. I have attached the images for these phising attempts for a business email its hard to block them but much easier on gmail to report phising attempt from their email address. Other than using filters and blocks is there anything else sugeested that anyone has tried. They have been spamming us continuous for a while now any ideas would be helpful.
Topic summary
Main issue: A merchant is being flooded for over a month with phishing/refund requests via business email and contact forms, alleging unauthorized charges and threatening legal action. No matching orders or payment records exist; provided “proof” appears edited. Responding seems to increase spam volume. Images were attached showing example phishing messages.
Requested help: Looking for measures beyond email filters and blocks.
Recent advice: This is common and ongoing (multiple emails weekly). Best practices suggested:
- Mark as spam and/or block senders.
- Do not click links; hover to preview URLs and treat non-official domains as scams.
- Even official-looking Shopify links can be malicious; when in doubt, contact Shopify Support directly to verify any billing or payment claims.
Outcome/status: No new technical solution identified; standard anti-phishing hygiene recommended. Discussion remains open with no definitive resolution.
Hey Delc,
This is par for the course, I’m afraid. I get like 3-5 of these kinds of emails per week, and have been for years now. Not much you can do about it, beyond marking as spam (or blocking the email addresses that they’re coming from) within your email account.
Lots of scammers on the internet – it is what it is. Just make sure you’re not clicking into any of the links they include in the emails. You can always hover over the link to see the URL in the bottom left-hand corner of your browser – if it’s not an official Shopify URL, then it’s probably a scam … and even if it is a Shopify URL, it’s still probably a scam.
If you think the email is coming from Shopify legitimately, but you’re unsure, you can always reach out to Shopify’s support team to confirm that you have an outstanding bill, payment method didn’t work, etc.
Cheers,
Stephen