Is this email from Shopify or is it a spam or other?

I received an email a few days ago from “Shopify”? and not too sure if this is genuine or is it a spam or worse?

I was suspicious that it is asking me to click on a link etc and that the email address didn’t seem to synch with a shopify email? but did come from a “shopify” email (shopify validation shopify@d0notreply.com)

I sent a query to shopify “legal” as this was the only email I have - but this bounced back ?

"Hello, this is to inform you of the current change for all Shopify stores owners, that commences on the 9th of May.

In regards to this, the shopify security agency has placed a strict update for validation of stores in alignment to the current world ecommerce regulation policy, of session bc/nrct/1105/shopify.

This effect commence from 9th of May through 15th of May.

In regards to this, this is to inform you that stores owners whom fail to comply with the new ecommerce policy validation of session bc/nrct/1105/shopify

will lost ownership to ones store respectively, due to failure of compliance of the current world ecommerce policy.

Follow the validation icon for validation https://www.shopify.com/validation

Verification may be required

-The shopify team

We apologize for any inconveniences this may cause you

©Shopify, 150 Elgin Street, Ottawa ON, K2P 1L4
Shopify.MailID:1-1.5f9af5a3.7887408.24efb5057b3db7699eb5fb971c006967

This could be a phishing email, to be on the safe side forward the message to Shopify’s safety inbox at safety@shopify.com.

Hey Nick - many thanks for reaching out, I received another “follow-up” email about an hour ago as well. Will send to this email.

Cheers

Nick

1 Like

hmmm just done that and they have blocked my email from going through … not sure where to from here ?

You could try reaching out to merchant support directly
Contact page link: https://help.shopify.com/en/questions#/contact/

1 Like

Thanks again Nick - I have just made contact via this link. Very helpful.

Cheers

Nick

Greetings, @NickVA .

Thank you for reaching out and bringing this to our attention!

It does look like a phishing email, as suggested by @Nick_Marketing , due to the grammatical errors and email address (shopify@d0notreply.com)) found in your email. Since Shopify owns Shopify.com, then the emails that you would receive from Shopify would typically end with @shopify.com.

When handling phishing emails, it’s important to not click into any links within the email. However, if you did click into any links, then we’d recommend taking steps to secure your account, reviewing the login history, and considering securing your account with two-step authentication. From there, you can simply forward the email with original headers to our Safety team at safety@shopify.com. If you need help with obtaining headers, then please take a look at the following instructions:

  1. Trace an email with its full headers - Gmail
  2. How to Get Email Headers - Office 365, Outlook, Microsoft Exchange, Hotmail, Yahoo, AOL, etc.

Did you get a chance to speak with our support team and forward the email with original headers? Do you use two-step authentication on your store?

2 Likes

Any email I forward to safety@shopfiy.com gets a 505 rejection

1 Like

Hey, @smWollman .

Thank you for joining the thread!

It looks like you might have a typo in the email address. Could you try sending it again to safety@shopify.com?

It’s also important for me to ask whether you clicked on any links in the email? If so, then we’d recommend taking some precautionary steps to securing your account and reviewing your login history. For additional protection, we’d also encourage enabling two-step authentication.

We look forward to hearing from you!

1 Like

The typo was by me in this thread only. Not in the email I send. This is the response I get “Unable to send message to recipients. (550 smwollmandesigns@midco.netmessage rejected.” I tried just this morning as I had 3 spam emails using Shopify as their name (of course the email they use is a not a shopify email) I just want to know where to send them,

Hey, @smWollman .

Thank you for following up and providing the additional context!

I can confirm that the email address (safety@shopify.com) is correct, and I was able to send an email to it (using my personal account) without receiving any bounce back. That being said, I’ve also noticed that you’re using a custom hosted email and, according to Email Error 505 - What Is It? And How To Fix It , it’s possible that you’re experiencing a different issue due to an invalid or blocked domain.

Since you’re using a custom email address, then it’s worth noting that you may need to have something like a Sender Policy Framework (SPF), DomainKeys Identified Mail (DKIM), or Domain-base Messaging Authentication Reporting and Conformance (DMARC) record set up on your domain (midco.net) so that emails sent from your domain aren’t being flagged as spam or rejected by the recipient’s server. As for using custom hosted emails with Shopify, we’d recommend setting up the SPF or DKIM when using third-party domains with your store and you can find our records here: 'Setting up your email. Just to confirm, do you have an SPF, DKIM, or DMARC record from your hosted email on your domain settings?

If you haven’t set up one of these records or you’re not sure, then this is something that your domain and email provider can assist you with. Alternatively, you can also try using a free email, such as Gmail, Hotmail, iCloud, and send the email to our Trust & Safety team (safety@shopify.com).

I’d love to know if these suggestions can help get your email sent through. Keep me posted!