I just got the same email.
Topic summary
Store owners are receiving spam messages through their Shopify contact forms with vague content like “I want to share something important about [store name]” followed by suspicious email addresses (ending in @shopify-experts.org) and phone numbers.
Official Response:
- Shopify staff confirmed these are spam/phishing attempts that should be deleted and ignored
- The @shopify-experts.org domain is not legitimate
- Users should forward suspicious emails to safety@shopify.com so Shopify can track these attempts
Pattern Identified:
- Multiple users report receiving identical or nearly identical messages
- Messages include various phone numbers (UK and US numbers that appear fake)
- Some variants use Gmail addresses
- The spam campaign has been ongoing since at least 2021 and continues into 2024
Recommended Solutions:
- Install spam prevention apps like Zero Spam Contact Form or Shop Protector
- Block the shopify-experts.org domain from contacts
- Report incidents to safety@shopify.com with email headers
Status: Ongoing issue with no security threat to stores, but remains a nuisance for merchants.
1 Like