The bot is constantly adding products to the cart without checking out (different name and email address but the same shipping address shown on the customers section). If I set up visitors have to log in the account before checkout the bot will stop action. But I hope the visitor is available to place order without my store account. What should I do?
Topic summary
Ongoing issue: automated-looking activity is repeatedly adding products to the cart and never checking out, using different names/emails but the same shipping address. Forcing account login before checkout stops it, but the goal is to keep guest checkout enabled.
A participant questions how it’s confirmed to be a bot versus a human, highlighting the need to validate the signal (e.g., same address reuse) before acting.
Proposed mitigations that preserve guest checkout:
- Enable Google reCAPTCHA on cart and checkout to verify users are human with minimal friction.
- Add a bot-mitigation Shopify app (e.g., Shop Protector by Human Presence, Bot Protection) to block scripted cart activity.
Status: No resolution reported yet. Action items are to confirm bot behavior, enable reCAPTCHA, and/or trial a bot-protection app. Outcome and effectiveness remain unconfirmed; discussion is open.
2 Likes
Hi @Anne233
why do you know it’s bot or human?
Here’s what you can do to stop the bots without hurting your sales:
Enable Google reCAPTCHA on your store’s cart and checkout without annoying real users.
Use a bot-blocking Shopify app. There are apps like Shop Protector by Human Presence, Bot Protection.