Hi Eliza,
Have you tried IP blockers?
Topic summary
Multiple Shopify store owners report persistent bot attacks creating fake abandoned checkouts and customer profiles, often in regular intervals (every 6-9 hours). The bots access hidden/locked products, use identical fake information (commonly “James James” from Texas/New Mexico, or addresses like “Street 10 apt 2”), and evade standard security measures.
Failed Solutions:
- IP blockers, ReCAPTCHA, fraud filters, and URL changes prove ineffective
- Bots use different IPs for each attempt and don’t complete checkout, making blocking difficult
- Three different blocker apps tested without success
Suspected Purpose:
Credit card testing across multiple Shopify stores, exploiting AVS verification gaps
Partial Workarounds Found:
- Shopify Flow app to tag/delete fake customers and prevent high-risk payment capture
- Switching from one-page to three-page checkout temporarily stopped bots
- “Easyban - Country Blocker” app reported effective by one user
Major Concerns:
- Distorts conversion rate analytics and email marketing metrics
- One case reports entire product catalog scraped to fraudulent website
- Shopify Support offers no solution for non-Plus merchants, suggesting only plan upgrades
- Community frustration growing, with mentions of potential class action
Status: Unresolved. Shopify acknowledges bot protection feature “in process” but provides no timeline. Issue affects both Basic and Plus plan merchants.
1 Like