Title says most of it. Just trying to figure out if those emails are from shopify or a clever scammer
Topic summary
Concern: Whether emails ending with @em.shopify.com are legitimate or phishing.
Key update: Some official Shopify emails do come from the em.shopify.com domain. Legitimacy can be confirmed through Shopify’s authenticated support channels.
Actions recommended:
- If uncertain, forward the email to security@shopify.com for verification.
- Include full email headers, which show technical routing/authentication details used to assess legitimacy.
- Use the provided guide (MX Toolbox: “How to Get Email Headers”) to retrieve headers if needed.
Outcome/status: Guidance provided with clear verification steps; no further issues reported in-thread. The question is effectively resolved with a safe process for handling suspicious messages.
Notes: No attachments or media are required to understand the issue; email headers are central to the verification process.
Hi @Zephyr0418
Thank you for reaching out to confirm this! We do have some emails that end in em.shopify.com and our authenticated support channels would be happy to verify this for you.
You can also forward any suspicious emails that appear to be from Shopify to security@shopify.com. It’s important to include the email headers as they contain important information for our security team. You can follow the instructions provided by MX Toolbox if you are unsure how to do that: How to Get Email Headers.