Possible scam

Topic summary

A user received an email from shopifydigitalgoods@gmail.com claiming their Shopify account and website are compromised with malware SEO, requesting they hire someone to fix the issue.

This is confirmed as a scam. Key indicators:

  • Shopify never uses Gmail accounts for official communication
  • Legitimate Shopify emails only come from official domains: @shopify.com, @email.shopify.com, @em.shopify.com, and @shopify-billpay.melio.com
  • Similar scam attempts are widely documented online

Common scam tactics include:

  • Presenting fake malware scan results
  • Requesting payment for “solutions”
  • Claiming malware originates from the user’s computer to gain remote access
  • Installing remote access software to monitor computers and potentially drain bank accounts

Recommended action: Do not click any links in the email. When uncertain about email legitimacy, verify through official Shopify documentation or community discussions.

Summarized with AI on November 2. AI used: claude-sonnet-4-5-20250929.

hi I have received an email from this email address

shopifydigitalgoods@gmail.com
it’s stating my account and website have been compromised with malware SEO. It’s prompting me to have someone to fix the problem? Has anyone else got this? Is it valid?
thanks Susan

Hi @susanharrisdesi

Welcome to the community.

First, that is a clear scam. Shopify will never use Gmail account. Check

https://help.shopify.com/en/manual/privacy-and-security/account-security/phishing#recognizing-legiti…

“Shopify will only send emails from official domains such as @shopify.com, @email.shopify.com, @em.shopify.com, and @shopify-billpay.melio.com. Emails from public email services such as Gmail, Yahoo, Apple mail, or Hotmail aren’t from Shopify and should be treated as potential phishing attempts.”

If you search here or just Google you will find hundreds of topics with similar emails, like trying to pay for a free theme and so on. Note that some users have written a full experience if you click the link and trust the scammers. First, they would present some fake results that your store is compromised and offer a “solution” for some money amount. Then they could continue with lies, like, “Malware comes from your computer and we need to access it so we can fix it”. With that, they can guide you to install remote access software and then can monitor your computer. there could also be an issue with your bank; if users give them access, they can drain the accounts.

So do take care, do not click any links. If in doubt check discussions here or Google.

Stay safe.