Yes same issue with us. Street 10 apt 2. I will say that after a week of creating abandoned checkouts, they successfully made a purchase today. Thankfully shopify flagged it as high fraud potential, and i immediately recognized the street 10, apt 2 address, so I canceled the order. Still, I’d like to understand if there is anything to do to block them; and what is their end game? It seems that they’re always looking for the lowest cost item in the store, whether it’s $0 or another small figure.
Topic summary
Multiple Shopify store owners report persistent bot attacks creating fake abandoned checkouts and customer profiles, often in regular intervals (every 6-9 hours). The bots access hidden/locked products, use identical fake information (commonly “James James” from Texas/New Mexico, or addresses like “Street 10 apt 2”), and evade standard security measures.
Failed Solutions:
- IP blockers, ReCAPTCHA, fraud filters, and URL changes prove ineffective
- Bots use different IPs for each attempt and don’t complete checkout, making blocking difficult
- Three different blocker apps tested without success
Suspected Purpose:
Credit card testing across multiple Shopify stores, exploiting AVS verification gaps
Partial Workarounds Found:
- Shopify Flow app to tag/delete fake customers and prevent high-risk payment capture
- Switching from one-page to three-page checkout temporarily stopped bots
- “Easyban - Country Blocker” app reported effective by one user
Major Concerns:
- Distorts conversion rate analytics and email marketing metrics
- One case reports entire product catalog scraped to fraudulent website
- Shopify Support offers no solution for non-Plus merchants, suggesting only plan upgrades
- Community frustration growing, with mentions of potential class action
Status: Unresolved. Shopify acknowledges bot protection feature “in process” but provides no timeline. Issue affects both Basic and Plus plan merchants.
1 Like