I recently received this email. Is it spam? I couldn’t find any notification in my Shopify account. No idea what any of this means. Thank you for any explanation.
~~~~~~~~~~~~~~~~~~~~~~~~~~~
Hi,
I am Arnel C. from Shopify Support Team.
During a recent background check on registered and active shops on the platform including your store, we found out that your security patch, particularly the backend certificate tied to your store’s cipher suites is close to expiration.
The expiration of this backend certificate cannot be risked, which is why I am reaching out and your prompt response is very important.
Hey @Felbz,
Thanks for posting this to Shopify community.
Could you please share the Email address whom send you this E-mail.
Based on that I can gave you the best Answer whether it’s a legit or Scam. Sometime most important E-mails considered Scam and in return Merchants have to face a lot of issues.
Like others said check email of sender, but it does sounds like a scam. I mean “backend certificate” what about front end one. Backend certificate, cipher status, and security patches is something Shopify do on their end as your store is tied to myshopify.com subdomain.
Do check Shopify documentation on how to recognizing legitimate Shopify emails
Shopify will only send emails from official domains such as @shopify.com, @email.shopify.com, @em.shopify.com, and @shopify-billpay.melio.com. Emails from public email services such as Gmail, Yahoo, Apple mail, or Hotmail aren’t from Shopify and should be treated as potential phishing attempts.
@Felbz That email is a phishing scam Shopify never asks about “backend certificates.” All SSL is handled automatically. Just delete it and, if you’d like, forward it to safety@shopify.com.
Thank you everyone for the replies. It’s been so long since I have gotten a Shopify phishing scam that I forgot their emails only come from @shopify.com. Appreciate the reminder. I have forwarded the email to phishing@shopify.com