Scam email?

Shopify Discussion

Topic summary

A merchant received a suspicious email claiming to be from Shopify, sent from a Gmail address (shopify.solution.shopify@gmail.com). The email warned of urgent security issues including “Theme License Code Error” and “SSL Certificate Mismatch,” demanding action within 48 hours.

Community consensus: This is a scam.

Key red flags identified:

Recommended actions:

  • Do not respond or click any links in the email
  • Forward the phishing attempt to safety@shopify.com
  • Mark as spam and delete
  • Check the Shopify admin dashboard directly for any legitimate alerts
  • When in doubt, always log into Shopify directly rather than through email links
Summarized with AI on October 30. AI used: claude-sonnet-4-5-20250929.
1

email and the email sender address is shopify.solution.shopify@gmail.com Dear Merchant,

Our automated security and compliance monitoring system has identified critical configuration issues in your store that require immediate attention. These issues will affect your store’s security, performance, and adherence to Shopify’s operational policies.

Identified Issues:

  1. Theme License Code Error (TLEC-026)

Issue: Your store is running a theme that does not contain a valid license key.

Impact: This may lead to restricted theme functionality, inability to receive updates, and potential non-compliance with Shopify’s Theme Store policies.

Recommended Action: Verify and enter the correct theme license code via the theme settings or contact your theme provider for assistance.

  1. SSL Certificate Mismatch (SSLE-004)

Issue: The SSLsertificate assigned to your store

  1. SSL Certificate Mismatch (SSLE-004)

Issue: The SSL certificate assigned to your store does not match the registered domain or has an invalid Common Name (CN) entry.

Impact: This could trigger security warnings for customers, affecting trust and SEO rankings.

Additionally, it may lead to failed HTTPS connections or browser-based security blocks.

Recommended Action: Ensure that the SSL certificate is correctly installed and issued for the primary domain. If using a third-party SSL provider, confirm proper DNS and certificate chain configurations.

To prevent service disruptions, please address these issues within the next 48 hours. If you require assistance, reply to this email, and our support team will provide step-by-step guidance on resolving these configuration errors.

Best regards,

Dan

Shopify Support Team

1 Like
2

This is scam?

3

Yes.

Any legit organization would have the brand name as their email address. Since it’s a gmail.com address, it’s not legit.

Shopify emails will always end in support@shopify.com or partners@shopify.com or billing@shopify.com

No one would ever email you from shopify without that being the email style.

Feel free to mark as scam/delete.

1 Like
4

Hi @Kamile2

This email is a scam, don’t respond or click on any links. Shopify will never contact you from a Gmail address (official Shopify emails come from @shopify.com).

Here’s what you should do:

  • Check your Shopify admin for any real alerts (Shopify will notify you inside your dashboard if there’s an actual issue).
  • Report the email as phishing to Shopify by forwarding it to safety@shopify.com.
  • Mark it as spam in your email inbox to prevent further messages.

If you’re ever unsure about an email, log in to your Shopify account directly (not through any links in the email) and check for any real security warnings. Stay safe! :slightly_smiling_face: