received letter from shopify? is this spam?

Shopify Discussion

Topic summary

Multiple Shopify store owners have received fraudulent emails claiming customer complaints about undelivered orders. The phishing emails share identical characteristics:

Common red flags identified:

  • Sender addresses from non-Shopify domains (primarily @montana.edu and @pasadena.edu addresses)
  • Same fake ticket number (293463581) across all reports
  • Identical product numbers (0281** and 0282**)
  • Similar order amounts ($624.81 or $821.08)
  • Links that redirect to suspicious domains (not shopify.com)
  • Threats of account suspension to create urgency

Key verification tip: Legitimate Shopify emails only come from addresses ending in @shopify.com without special characters.

Recommended action: Forward suspicious emails to safety@shopify.com for investigation. Do not click embedded links.

One participant reported accidentally clicking a phishing link but experienced no immediate consequences. The discussion serves as a community warning about this ongoing phishing campaign targeting Shopify merchants. The issue remains active with reports spanning from July through September 2021.

Summarized with AI on October 29. AI used: claude-sonnet-4-5-20250929.
18

Hey @Aurelian .

Thanks for reaching out.

I appreciate that you have included the context of the email you have received as that is super helpful. Could you send this to our internal team to investigate the phishing attempt by forwarding the email to: safety@shopify.com? This will allow our team to look into this further. I would ahead and informed our internal team of this phishing attempt you have received.

Let me know if you have any questions or concerns.