A phishing scam is targeting Shopify store owners through fraudulent emails requesting business verification details. The emails appear legitimate but redirect users to fake login pages designed to steal credentials.
Key warning signs:
How to verify legitimate Shopify emails:
Multiple users have reported receiving these scam emails recently. Community members recommend reporting such incidents directly to Shopify using official channels.
Just a warning to everyone:
We got this email today asking for business details and verification. It redirects to a website login that emulates Shopify:
The email seems legit but is a scam:
When you check the link of the button [“confirm business information”] it leads to a cloaked web address:
https://hoo.be/josephinajewelry/17d4FMNYwvu
Be careful out there.
You must check the sender’s email address before clicking on an email. If you have clicked to open a link, please check the address URL before doing anything.
Hi @shopfy-2020
Thank you for reporting this scam. Yesterday one other user shared the same email and mentioned sender email was admin@email.shopify.com so a spoofed email. And that is dangerous as a lot of people would not check link on that button but they should. Please take time to report this to Shopify, here is guide from @jasonh https://community.shopify.com/c/shopify-discussions/be-aware-of-spam-mails-close-shopify-store-email/m-p/2779688/highlight/true#M470941
Thank you for sharing this with us @shopfy-2020
I really appreciate it! I will note this mail and this case in my sheet note 
Oop, we just got one of these this weekend. What tipped me off was it was sent to our distro email that we use as our forward-facing email, and not the store owner’s email. I had to shout at the others on the distro email so they wouldn’t click the link until I had a chance to closely review it, haha.
Thank you sharing this since March @shopfy-2020 I was looking through Reddit and apparently somebody encountered something similar recently. A rule of thumb for anyone who might be seeing this for the first time is to always disregard any “official mail” coming from an account with “@gmail.com” or something similar in its address. It’s not from Shopify directly and is most likely a scam.
