I’m getting bombarded by a buch of bots trying to checkout on my website.
I’m using Braintree by PayPal now that they switched. They are threatening to cancel my account if I don’t contact my web developer to stop it.
Any ideas on what to do? I just put a ip/country blocker on my site but I doubt it will work. I need a captcha thing for my checkout 
. Any idea
Hi Anthony, this sounds like a card-testing attack. An IP or country blocker probably won’t be enough on its own.
In Braintree, enable or tighten AVS, CVV, 3D Secure and velocity/risk rules. Then send Braintree Support the failed transaction times and decline codes so they can help block the pattern.
Adding CAPTCHA directly to Shopify checkout usually isn’t possible, so the main fix needs to be at the payment gateway level.
This is a fairly common issue, and IP/country blocking alone usually isn’t enough since bots often use rotating IPs and proxies.
If you’re on Shopify, you can:
Enable Google reCAPTCHA (if available for your store/plan) to help protect checkout and customer forms.
Enable Shopify Bot Protection if your plan supports it.
Use Shopify Flow to flag or cancel suspicious orders automatically.
Install a bot protection app such as Shop Protector, Negate, or Beacon for additional checkout protection.
Review your Braintree fraud settings and enable stricter fraud filters (AVS, CVV verification, velocity checks, etc.).
Best regards,
Devcoder 
This part sounds pretty strange. I wonder how and in what method they are threatening you, and how they know you have a web developer, and why would you need to contact them? lol I think there is much more to this story than simple card-testing checkout bots… unless the threats and the checkout bots are completely unrelated, and you’re simply reading a spam email…
There are tons of things you can do. You could even pause your store or redirect to a 404 until they move on…
Hello @Anthony_Gonzal1 Thanks for reaching out to Shopify community with your concern. Sorry that you are facing such issue. As far as bots are concern, bots on checkout page is not good as the payment gateways see it as a fraud happening at your store.
You can do a couple of things, first contact the Shopify support to verify if they can look into the issue to block those bots somehow and evaluate what are the options available.
Secondly you can configure your domain through Cloudflare and enable their bot prevention mode, define WAF rules or rate limiting.
Hope that helps.
Hi,
@Anthony_Gonzal1
Based on my experience as a Shopify Developer, you can’t directly customize the checkout page to add a custom CAPTCHA because Shopify restricts checkout customization unless you’re using Shopify Plus.
To help prevent this issue, here are some of the most effective solutions:
1. Enable Shopify’s Native Bot Protection / CAPTCHA
Shopify includes built-in security features to help detect and prevent bot activity.
2. Install a Fraud Prevention App
Install a fraud prevention app from the Shopify App Store to automatically detect and block bot traffic, fraudulent transactions, and suspicious checkout activity.
3. Optimize Your Braintree / PayPal Settings
To reduce the risk of fraudulent transactions and help protect your Braintree account:
I hope this answer meets your requirements and helps resolve your issue.
Thanks!
Hi there @Anthony_Gonzal1
Bot checkouts are normally most effectively dealt with with the multi-layered system. Begin by analyzing your sources of traffic and then consider implementing a fraud prevention app or security layer that can stop suspicious activity prior to checkout. You can turn on Shopify’s fraud analysis tool, and browse checkout protection apps adding bot detection without friction for real shoppers. Just blocking countries/IPs is usually not enough, since bots can rotate their locations. Also check your theme and apps for any suspicious checkout traffic triggers.
