Scam? Or legit

Shopify Discussion

Topic summary

Multiple Shopify store owners are reporting phishing emails claiming their stores will be shut down for “unlicensed themes,” “policy violations,” or “configuration errors.” These fraudulent emails share common characteristics:

Red flags identified:

  • Sender addresses use Gmail domains (e.g., shopifysalesimprovementboard@gmail.com, shopifycertifiedpartner@gmail.com) rather than official @shopify.com addresses
  • Different sender names using the same email address or similar patterns
  • Urgent threats of store suspension within 24-48 hours
  • Requests for payment ($170-400+ mentioned) to “fix” issues
  • Links to Telegram contacts for “support”
  • Fake ticket IDs and partner credentials

Official Shopify staff responses confirm:

  • These are NOT legitimate Shopify communications
  • Free Shopify themes (like Dawn) require no licensing
  • Official Shopify emails never use Gmail addresses
  • Users should forward suspicious emails to safety@shopify.com with full headers
  • Do not click links, provide personal information, or send payments

Status: Confirmed scam campaign. Community members who forwarded emails to Shopify’s safety team received verification that these are fraudulent. The thread has been marked as resolved by moderators to help others identify similar phishing attempts.

Summarized with AI on October 27. AI used: claude-sonnet-4-5-20250929.
22

@kleberms77 @Kaelceramic @Purplepoemcraft @Tr3ClothingLLC

We have been alerted to fraudulent emails falsely claiming to raise security or technical concerns about your Shopify store. Like you mentioned, the safest course of action is to report this email to our safety team. In the meantime, please disregard these emails and ensure you do not click on any links or provide any personal information.

To help us investigate, please follow these steps:

  1. Obtain the Email’s Headers:

  2. Forward the email and the header file to safety@shopify.com.

Thank you for helping keep our community safe. For any individual concerns or more details, please visit our help page on Protecting your account against phishing, vishing, and smishing.

I have marked this post as resolved to ensure this clarification is easily accessible for anyone searching for it. Thanks again for bringing it to the community’s attention.

2 Likes