Website cloning occurs when someone creates an exact duplicate of your website on a different domain. When unsuspecting customers make purchases on the cloned site, the scammer takes their money without fulfilling orders. This leads customers to believe that your company is at fault, which can severely damage the reputation of a small business.
Several years ago, my Shopify website was maliciously cloned over 24 times. While I was eventually able to address those incidents, I am now experiencing the same issue again. It’s deeply concerning that, despite numerous reports from other users about website cloning—some dating back to at least 2018—Shopify has yet to develop a permanent solution to this significant problem.
Rather than providing meaningful support, Shopify often deflects responsibility, leaving business owners to deal with the fallout on their own. As a multi-billion-dollar corporation with robust legal and technical resources, Shopify is in a position to take decisive action. For example, Shopify could proactively send copyright infringement and DMCA takedown notices, implement script protections to prevent cloning, or create tools to assist affected users.
It’s disappointing that despite the company’s resources, users continue to face this issue without adequate support. I feel it’s important to share my experience so that others are aware of the risks and the lack of assistance they may encounter if this happens to them. Judging by the number of users reporting similar incidents, this issue is far too common. DO BETTER SHOPIFY!
@PBonShopify I’m sorry to hear about your experience with website cloning—it’s a serious issue that can harm any business. While Shopify provides a strong platform, it’s clear more proactive measures are needed to address this problem. I hope Shopify listens to feedback like yours and implements better protections for its users.
Sorry you’re dealing with this again, 24 times is brutal, especially since it sounds like you already went through this whole fight once before and now have to redo it.
You’re right that Shopify hasn’t built anything native for this. From what I’ve seen digging into this problem, most cloning happens through simple page scraping, the scammer copies your HTML/images onto another domain and runs ads straight to it. The frustrating part is you usually don’t find out until a customer complains about an order that was never yours.
A few things that help in the meantime, since Shopify support won’t proactively catch this:
- Google Alerts for exact phrases from your product descriptions (catches some clones through search indexing)
- Checking your product photos periodically with reverse image search
- If you find a clone, reporting to the domain registrar and hosting provider directly tends to get faster takedowns than going through Shopify
I actually got frustrated enough with this exact problem that I built a small tool that watches for this and auto-redirects cloned traffic back to the original store the moment it’s detected, instead of finding out weeks later from a customer complaint. Not trying to pitch here, just mentioning it in case it’s useful given what you’re dealing with, happy to share more if you want, otherwise no worries.