received letter from shopify? is this spam?

Topic summary

Multiple Shopify store owners have received fraudulent emails claiming customer complaints about undelivered orders. The phishing emails share identical characteristics:

Common red flags identified:

  • Sender addresses from non-Shopify domains (primarily @montana.edu and @pasadena.edu addresses)
  • Same fake ticket number (293463581) across all reports
  • Identical product numbers (0281** and 0282**)
  • Similar order amounts ($624.81 or $821.08)
  • Links that redirect to suspicious domains (not shopify.com)
  • Threats of account suspension to create urgency

Key verification tip: Legitimate Shopify emails only come from addresses ending in @shopify.com without special characters.

Recommended action: Forward suspicious emails to safety@shopify.com for investigation. Do not click embedded links.

One participant reported accidentally clicking a phishing link but experienced no immediate consequences. The discussion serves as a community warning about this ongoing phishing campaign targeting Shopify merchants. The issue remains active with reports spanning from July through September 2021.

Summarized with AI on October 29. AI used: claude-sonnet-4-5-20250929.

I received the same e-mail and it came from julie.gameon@montana.edu... Sounds like a common theme. Phishing!