No, you are fine if you did not grant him access to manage your store.
Topic summary
A widespread scam has been identified where developers falsely optimize Shopify store speeds by inserting code that detects speed testing tools (Lighthouse, GTmetrix) and serves them empty pages, artificially inflating scores. The issue became apparent when Shopify stopped using Lighthouse for its speed calculations around August 2021.
How the scam works:
- Fraudulent code uses
document.writeanddocument.opencommands in theme.liquid files - Detects user agents for Chrome-Lighthouse, GTmetrix, and Linux platforms
- Serves blank content to testing tools while showing full content to regular visitors
- Results in high test scores but poor actual performance
Detection methods:
- Search theme files for
document.write/document.open(use Ctrl+G) - Check if PageSpeed Insights preview shows missing elements
- Use Shopify Theme File Search Chrome extension for comprehensive scanning
- Look for hexadecimal encoded strings (e.g.,
\x6E\x61\x76\x69\x67\x61\x74\x6F\x72)
Reported scammers:
Multiple users identified fraudulent developers on Fiverr and Shopify Expert Marketplace, with screenshots shared. Several victims reported the scam takes weeks and significant money to fix, as it damages store functionality. Some confronted scammers successfully obtained refunds, while Shopify is reportedly investigating cases.
1 Like