Thank you for calling it out here for the community.
I can confirm that Shopify does not use Gmail for merchant communication.
Like you mentioned, the best action has been not to respond to the messages when in doubt. Please disregard these emails and ensure you do not click on any links or provide any personal information.
To help us investigate, please follow these steps:
-
Obtain the Email’s Headers:
- Refer to MX Toolbox’s guide for Getting Email Headers.
- Select your email service provider on the left-hand navigation.
- Follow the steps to download a copy of the .eml file or copy the email’s source code into a text file.
-
Forward the email and the header file to safety@shopify.com.
Thank you for helping keep our community safe. For any individual concerns or more details, please visit our help page on Protecting your account against phishing, vishing, and smishing.