New email scam 2025

Shopify Discussion

Topic summary

A phishing scam targeting Shopify store owners has been identified, using emails from Gmail addresses with generic names (like “Emmanuel”) followed by numbers (0125, 902).

Scam characteristics:

  • Vague, urgent messages asking to confirm if recipient is the store owner
  • Links appearing to be the victim’s website (potentially hyperlinked elsewhere)
  • Requests for WhatsApp numbers
  • Email addresses that quickly disappear or bounce back

How it works:
Scammers attempt to trick owners into clicking malicious links leading to fake Shopify login pages to steal credentials and personal information.

Recommended actions:

  • Never click links in suspicious emails
  • Verify inquiries through Shopify’s official contact forms
  • Report phishing attempts to Gmail
  • Enable two-factor authentication on Shopify and email accounts

Multiple merchants have confirmed receiving similar messages, indicating an active campaign.

Summarized with AI on October 27. AI used: claude-sonnet-4-5-20250929.
1

Got an email last night saying “Hello, this is Emmanuel. Am I currently speaking with the store owner? Please let me know as soon as possible.” and then the link appearing to be my own website. (Could’ve technically been hyperlinked elsewhere) I was suspicious since Shopify didn’t send me any alerts but the email was just his full name and 0125 at gmail. So I responded but Google replied that the address couldn’t be found.

I’m assuming it was a scam and that Google already banned and deleted the address. Just wanted to spread awareness since I didn’t see anyone having the same issue

3 Likes
2

Hello @Mythic_Shrimp

Thanks for sharing this—yes, that definitely sounds like a scam attempt.

This kind of message follows a common phishing pattern:

. Vague and urgent language (“Am I speaking with the store owner?”).

. A display name meant to seem personal or legitimate (“Emmanuel”).

. A fake email address that vanishes quickly (e.g., Gmail bouncing it means it was likely deleted or never real).

. A link that appears to be your site, but could be hyperlinked to something malicious.

Scammers often try to:

. Trick store owners into clicking links that lead to fake Shopify login pages.

. Gather personal/store credentials.

. Exploit trust by mimicking real users or vendors.

You’re likely right that Google disabled the email address—automated systems catch and remove accounts used for spam/phishing quickly.

What You Can Do:

  1. Never click links in suspicious emails, even if they look like your site.

  2. Use Shopify’s contact form or inbox to verify inquiries.

  3. Report the email to Google via: Gmail Abuse Report.

  4. Enable 2FA on Shopify and email accounts if not already.

  5. Spread awareness (as you’re doing) in forums or merchant groups—these scams often go undetected until someone speaks up.

Thank you :blush:

3

Just got the same email (but with 902 rather than 0125). He’s asking me for my Whatsapp number. Nope!