I got an email form Shopify said I have a USD305.74 bill not yet paid, but my plan was just the basic one which is USD30/month, I tried to log in thru the email to see the invoice details and see the domain wasn’t Shopify.
This is the domain: https://tactprocessed.com/payment/
and I checked the email address it’s a random email address:
updatepro18@chargesmainbillviewoutstandingupdatestatussecuredpro.com
How could Shopify such an big e-commerce platform let hackers know my email easily?!
the email was pretty real just same as the Shopify email I got, people wouldn’t notice if they don’t pay attention to the details.