Tons of bots creating and abandoning carts

Did it and it works.

Armex is owned by BM. They created Armex because the BM app does not solve this issue. We were getting blasted by bots, thankfully only recently. We installed BM and then complained when it did not solve the issue…so BM recommend Armex.

We installed Armex and within 24 hours our bot traffic stopped. We were nervous about messing with the DNS as well but Armex support was super helpful and quick with replies in walking through the set up. (We also used our Server Support Chat to assist with the DNS changes.)

We left one of the reviews for Armex and it is legit. The app is not “public” yet on Shopify search because Armex doesn’t want everyone downloading without getting the tech support to properly set it up. (at least that’s what they told us). I specifically asked Armex if Shopify is cool with this app since Shopify has done nothing to fix the issue, they said “yes” they have worked with Shopify in the development process to make sure it works properly.

We have been using it for less than a week and zero bot abandoned carts and zero new customer sign ups. You can see the traffic that is getting blocked…and sales are still coming in as they should. We have not seen any issues with the app interfering in a way that would negatively impact our shop. Try it. It works

Same here,

We noticed an abnormal growth in traffic/subscribers. Which consequently increase our Mailchimp bill because they charge per tier on the amount of contacts. I doubt Mailchimp has anything to do with it, but bringing it up just in case it ends up being the common link among everyone… to increase our monthly bill.

@JanVeroti I decided to trust your recommendation a few days ago. Now all of a sudden I’m getting pinged with Errors from Shopify saying:

DNS records are not pointing to Shopify

That is to be expected because your dns records are NOT pointing to Shopify.
You can ignore this. It’s a water is wet warning.
This happens because your DNS is first pointing to Armex firewall, and then the traffic is routed to Shopify. Shopify detects that the DNS is not directly pointing to it and shows a warning, this is expected behavior. You can ignore it.

I get what you’re saying. However, the more I think about it, the less secure it sounds. I have no idea who they are, and Shopify Support just told me they’re an Unlisted App and not safe. While I want this fixed, I’m now cautious about security. I hope this App can get Listed or Re-Listed with Shopify so I can feel better about it. Shopify Support (now) recommends https://apps.shopify.com/securityking and yes I know, they’re recommended a dozen others that didn’t work. But I’ll try it and if it doesn’t work and I get more comforting information about Armex I might try it again.

Good luck.

@MaxIntegrations I use CloudFlare, but not pro account due to hostility between some cloudflare functions and shopify. I use a few cloudflare features.

To me, paying $10/mo to solve a problem is a no-brainer.
What do you charge to consult a WAF setup?

It’s very disappointing that Shopify isn’t tackling this issue… but they’ll waste their efforts on changing the live view layout every quarter!

TLDR; Armex is the only solution at this time.

After speaking with Shopify Support yesterday they advised me to not use Armex Firewall since it requires DNS changes, and steered me to some other useless App that they probably found by lazily searching for the word “bot” so they can get me offline. So I turned off Armex and…. got a hundred more Fake Bot Accounts overnight.

Of course the next Shopify Support person spends hours with their developers and comes back with a generic list of actions I can take that have nothing to do with this problem and… you guessed it said… Try Armex Firewall. ARGH!! :person_pouting: WTF?

So I’ve turned Armex Firewall back on. They truly seem to be the only solution that works. Why Shopify can’t do this and a small company like Armex can, I won’t think too hard on as it will just make me loose faith in Shopify. Thank you Armex. Your 5 star review is coming soon.

So cloudflare can help with this if I am not on the pro plan with shopify? I am on the basic plan.

We too have had this problem, and no one seems to be able to fix it. Very frustrating.

Please, Shopify, I’m begging you. Do something about this. I’m getting hundreds of profiles created every day.

ckinnee, did you end up trying the armex app and did it work for you? I’m dealing with the same issue of bots adding accounts.

Possible no-cost solution:

So that could mean bots that are possibly using exposed APIs or forms from third-party apps. You may wish to audit newly installed apps and restrict storefront API access as much as you can. Cloudflare using JavaScript challenge mode or bot fight mode with blocked repeating IPs / user-agent patterns on a server-level/proxy level rules

I installed Armex in July yo help stop the bots and their customer service is/was stellar. I am not techy and they helped me make changes with my IP address and set up the firewall etc. It worked perfectly for the first month and a bit, then a couple of weeks a go, the bots all came back. Overnight, boom!
They had me change my Shopify prefix with myshopify.com address. Still bots.
Then early this week I had people tell them when they went to my site it, was fine for a second and then they got a white screen. When I checked my site, it was fine in three different search engines. But for friends in other places, my site was not uploading and no 404 error. Just blank.

I had contacted Shopify help and all they saw was a blank screen as well.

Shopify had me put my Ip address back to its original value, uninstall Armex and voila, my site was back up an running. So, I don’t know. I am very un-techy so I can’t give any more specifics.

Armex was very helpful and I can’t say more about how good they were to walk me thru the process. It seemed to be the solution I needed. Until it wasn’t. They didn’t seem to have a solution once the bots started up again.

I am hesitant to reinstall bc of visibility issues. That is my experience. I am looking for a new app to help with the bots, but I am not expecting much.

As Armex caused visibility problems, a safer way would be to use Shopify-native bot protection combined with a lightweight app such as Shop Protector or Bot Protection by ShopPad. These have the ability to block suspicious traffic with minimal disruption to your site. Combining this with Cloudflare configurations usually mitigates the bot surges without locking customers out of the storefront.

Thank you! Ill look into the Cloudflare option. I appreciate your help w this matter :slight_smile:

There is also requiring customers to sign in to their account before checkout. It seems to stop scammers cold since they all use bogus email. It costs nothing. However, it adds an extra step to the checkout process, which is a downside.

So with this solution, it’s a trade-off. More spammers, or an extra step for customers.