Hi,
Received a message in my Shopify inbox from a “customer” telling me they can help with the design of my website and all of that. I figure it’s probably spam, which is fine. What confuses me is that my store isn’t live and is behind a password, so I’m confused how somebody in Nigeria has managed to get onto my store and use the chat function…
Any ideas??
Cheers
Hey, @Jaemes
Eunice here from Shopify. Thanks for posting, and welcome to the Community!
I’d love to help you work out how this customer is getting in touch with you. Let’s do some troubleshooting.
Merchants can turn on online store chat as well as other integrations so that they can manage conversations from multiple sources all through Shopify Inbox. With this in mind, could it be possible that a customer has reached you via Facebook messenger, Instagram direct messages, or Apple business chat?
Have you set up any social integrations? Check out this help page to learn more about those.
Hope to hear from you soon.
I constantly get messages from “Shopify Experts” wanting to help my poor horrible store. They are all from Nigeria, what do they really want? I know this has to do with money somehow.
Hi Eunice, I am having the same problem, we are constantly getting promotional messages from Nigeria. We get similar messages as in this screenshot I shared. (This is one of them)
On average, we receive at least 2-3 spam messages like this every day.
of course it does. They want to sell you their SEO / Marketing services, which are going to be garbage. If they were good at marketing or SEO, they’d use those things to promote their own business instead of doing cold outreach through customer service chats.
I completely agree with you! it sounds like you’re also dealing with some spam from Nigeria, which can be confusing since it’s not your target market. It’s possible that they have a list of sites that have Shopify Chat and that’s why we are getting traffic from there. I hope things improve for it soon!
Especially in the last days, the daily number of spam from Nigeria has started to be almost 10-15 and this situation has started to stress me more and more. After long research it looks like I’ve solved the problem with the technical info I got from the source below. I hope it will be useful for you too. I think it is necessary to introduce a country restriction for Shopify Inbox.
My Solution: https://www.huratips.com/tech-tips/how-to-block-specific-countries-from-accessing-your-shopify-store-without-app.html
oohh, that’s awesome. How do you know that yours are coming from Nigeria?
Shows the country name of the visitor in the Shopify inbox in its header. 
Hi
Same I’m getting 3- 5 a day from Nigeria, block one and another one comes. I tracked one name on Facebook and it seemed to be from Lagos Polytechnic. Hope Shopify can do something about this.
Thanks for sharing your solution.
I’m also getting these spam messages. It started up in the middle of January and I’ve had one message a day. I’ve got a feeling that they are sharing the information somehwere.
I had to look this up myself! I launch my store 3/20 officially but have a preview of items up, I have been getting like a message a day from these idiots. Has anyone used the coding above? I only plan on shipping to USA so I want to block all other countries
Hi
I didn’t try the coding, but there is an app in the Shopify app store " Firewall-Country IP restrict " there are a few but this one has a free plan.
I have tested it on my own website and it works perfectly fine! The implementation process is quite straightforward - just copy the code and paste it above the section of your website. If it disrupts your design, then paste it above the tag instead. Also, if you want to change the country code from ‘VN’ to ‘NG’, you can simply locate the ‘country_code == ‘VN’’ section and replace ‘VN’ with ‘NG’.
Me too this is getting annoying this morning in the last 4 hr I have had over 10
I have the same issue. But is geting to the point of minimun 5 messeges a day
At first i response to them thinking it maybe a cliente. But no. Same. Now i just block them. But newones keep coming. How do i stop this people 
Hi
In the end, I used an app in the Shopify App Store, Boost mark Country Blocker (BM Country Blocker) and it works very well, I haven’t had one spam from Nigeria since I’ve been using it. You will see that someone from Nigeria has seen your page but they will get an error code if they try to contact. I’ve also blocked Pakistan as I was getting a few from there also.
This is the updated version of the script, with this script you can block multiple countries from entering your site.
By adding other country codes instead of XX in ‘VN’, ‘NG’, ‘XX’ here, you will be blocking more than one country by duplicating the part separated by this comma.
var blockedCountries = ['VN', 'NG', 'XX']; // Add the countries you want to block as a list here
You can redirect to another site you want by changing the link in this line.
window.location.replace("//www.justice.gov/usao-ma/pr/seven-nigerian-nationals-indicted-international-phishing-romance-scam-and-other-cyber");
To incorporate the full script into your website, follow these steps:
By following these steps, you will successfully integrate the script into your website without any extra expenses. Your money will remain in your pocket 
This list below is the codes of all countries, I hope I helped you.
AC=Ascension Island,
AD=Andorra,
AE=United Arab Emirates,
AF=Afghanistan,
AG=Antigua and Barbuda,
AI=Anguilla,
AL=Albania,
AM=Armenia,
AO=Angola,
AQ=Antarctica,
AR=Argentina,
AS=American Samoa,
AT=Austria,
AU=Australia,
AW=Aruba,
AX=Åland Islands,
AZ=Azerbaijan,
BA=Bosnia and Herzegovina,
BB=Barbados,
BD=Bangladesh,
BE=Belgium,
BF=Burkina Faso,
BG=Bulgaria,
BH=Bahrain,
BI=Burundi,
BJ=Benin,
BL=Saint Barthélemy,
BM=Bermuda,
BN=Brunei Darussalam,
BO=Bolivia (Plurinational State of),
BQ=Bonaire, Sint Eustatius and Saba,
BR=Brazil,
BS=Bahamas,
BT=Bhutan,
BV=Bouvet Island,
BW=Botswana,
BY=Belarus,
BZ=Belize,
CA=Canada,
CC=Cocos (Keeling) Islands,
CD=Congo (Democratic Republic of the),
CF=Central African Republic,
CG=Congo,
CH=Switzerland,
CI=Côte d'Ivoire,
CK=Cook Islands,
CL=Chile,
CM=Cameroon,
CN=China,
CO=Colombia,
CR=Costa Rica,
CU=Cuba,
CV=Cabo Verde,
CW=Curaçao,
CX=Christmas Island,
CY=Cyprus,
CZ=Czech Republic,
DE=Germany,
DJ=Djibouti,
DK=Denmark,
DM=Dominica,
DO=Dominican Republic,
DZ=Algeria,
EC=Ecuador,
EE=Estonia,
EG=Egypt,
EH=Western Sahara,
ER=Eritrea,
ES=Spain,
ET=Ethiopia,
FI=Finland,
FJ=Fiji,
FK=Falkland Islands (Malvinas),
FM=Micronesia (Federated States of),
FO=Faroe Islands,
FR=France,
GA=Gabon,
GB=United Kingdom,
GD=Grenada,
GE=Georgia,
GF=French Guiana,
GG=Guernsey,
GH=Ghana,
GI=Gibraltar,
GL=Greenland,
GM=Gambia,
GN=Guinea,
GP=Guadeloupe,
GQ=Equatorial Guinea,
GR=Greece,
GS=South Georgia and the South Sandwich Islands,
GT=Guatemala,
GU=Guam,
GW=Guinea-Bissau,
GY=Guyana,
HK=Hong Kong,
HM=Heard Island and McDonald Islands,
HN=Honduras,
HR=Croatia,
HT=Haiti,
HU=Hungary,
ID=Indonesia,
IE=Ireland,
IL=Israel,
IM=Isle of Man,
IN=India,
IO=British Indian Ocean Territory,
IQ=Iraq,
IR=Iran (Islamic Republic of),
IS=Iceland,
IT=Italy,
JE=Jersey,
JM=Jamaica,
JO=Jordan,
JP=Japan,
KE=Kenya,
KG=Kyrgyzstan,
KH=Cambodia,
KI=Kiribati,
KM=Comoros,
KN=Saint Kitts and Nevis,
KP=Korea (Democratic People's Republic of),
KR=Korea (Republic of),
KW=Kuwait,
KY=Cayman Islands,
KZ=Kazakhstan,
LA=Lao People's Democratic Republic,
LB=Lebanon,
LC=Saint Lucia,
LI=Liechtenstein,
LK=Sri Lanka,
LR=Liberia,
LS=Lesotho,
LT=Lithuania,
LU=Luxembourg,
LV=Latvia,
LY=Libya,
MA=Morocco,
MC=Monaco,
MD=Moldova (Republic of),
ME=Montenegro,
MF=Saint Martin (French part),
MG=Madagascar,
MH=Marshall Islands,
MK=Macedonia (the former Yugoslav Republic of),
ML=Mali,
MM=Myanmar,
MN=Mongolia,
MO=Macao,
MP=Northern Mariana Islands,
MQ=Martinique,
MR=Mauritania,
MS=Montserrat,
MT=Malta,
MU=Mauritius,
MV=Maldives,
MW=Malawi,
MX=Mexico,
MY=Malaysia,
MZ=Mozambique,
NA=Namibia,
NC=New Caledonia,
NE=Niger,
NF=Norfolk Island,
NG=Nigeria,
NI=Nicaragua,
NL=Netherlands,
NO=Norway,
NP=Nepal,
NR=Nauru,
NU=Niue,
NZ=New Zealand,
OM=Oman,
PA=Panama,
PE=Peru,
PF=French Polynesia,
PG=Papua New Guinea,
PH=Philippines,
PK=Pakistan,
PL=Poland,
PM=Saint Pierre and Miquelon,
PN=Pitcairn,
PR=Puerto Rico,
PS=Palestine, State of,
PT=Portugal,
PW=Palau,
PY=Paraguay,
QA=Qatar,
RE=Réunion,
RO=Romania,
RS=Serbia,
RU=Russian Federation,
RW=Rwanda,
SA=Saudi Arabia,
SB=Solomon Islands,
SC=Seychelles,
SD=Sudan,
SE=Sweden,
SG=Singapore,
SH=Saint Helena, Ascension and Tristan da Cunha,
SI=Slovenia,
SJ=Svalbard and Jan Mayen,
SK=Slovakia,
SL=Sierra Leone,
SM=San Marino,
SN=Senegal,
SO=Somalia,
SR=Suriname,
SS=South Sudan,
ST=Sao Tome and Principe,
SV=El Salvador,
SX=Sint Maarten (Dutch part),
SY=Syrian Arab Republic,
SZ=Eswatini,
TC=Turks and Caicos Islands,
TD=Chad,
TF=French Southern Territories,
TG=Togo,
TH=Thailand,
TJ=Tajikistan,
TK=Tokelau,
TL=Timor-Leste,
TM=Turkmenistan,
TN=Tunisia,
TO=Tonga,
TR=Turkey,
TT=Trinidad and Tobago,
TV=Tuvalu,
TW=Taiwan, Province of China,
TZ=Tanzania, United Republic of,
UA=Ukraine,
UG=Uganda,
UM=United States Minor Outlying Islands,
US=United States of America,
UY=Uruguay,
UZ=Uzbekistan,
VA=Holy See,
VC=Saint Vincent and the Grenadines,
VE=Venezuela (Bolivarian Republic of),
VG=Virgin Islands (British),
VI=Virgin Islands (U.S.),
VN=Viet Nam,
VU=Vanuatu,
WF=Wallis and Futuna,
WS=Samoa,
YE=Yemen,
YT=Mayotte,
ZA=South Africa,
ZM=Zambia,
ZW=Zimbabwe
Hi
Thanks for that, it works as well, but for now, I’m using the app, it’s blocked the countries that I was having an issue with.
Thanks so much for that! It helps!