# \#cyber-security **URL:** https://community.shopify.com/tag/cyber-security/5317.md [Latest](https://community.shopify.com/latest.md) · [Categories](https://community.shopify.com/categories.md) · [Tags](https://community.shopify.com/tags.md) --- ## [Customers redirected to cloned checkout that captures card details — anyone else affected?](https://community.shopify.com/t/customers-redirected-to-cloned-checkout-that-captures-card-details-anyone-else-affected/700903)
**Author:** [@Sarah\_shop](https://community.shopify.com/u/Sarah_shop)\ **Replies:** 11\ **Last updated:** [October 25, 2026, 3:42pm UTC](https://community.shopify.com/t/customers-redirected-to-cloned-checkout-that-captures-card-details-anyone-else-affected/700903 "2026-10-25T15:42:11Z")
We’re investigating customer reports of an external checkout redirect affecting three of our Shopify stores. Customers are taken to checkout-guard\[.\]top, where a counterfeit checkout displays their actual basket. We’ve … --- ## [Account Hacked & Payout Account Changed - Now Locked Out of Our Account](https://community.shopify.com/t/account-hacked-payout-account-changed-now-locked-out-of-our-account/697048)
**Author:** [@nicolahssa](https://community.shopify.com/u/nicolahssa)\ **Replies:** 1\ **Last updated:** [October 13, 2026, 12:56am UTC](https://community.shopify.com/t/account-hacked-payout-account-changed-now-locked-out-of-our-account/697048 "2026-10-13T00:56:22Z")
We recently got hacked and the payout account on our store was changed. We couldn’t change the payout details as it requests the current details (which are the fraud details) We raised a ticket with Shopify, secured the… --- ## [Who to contact about scams?](https://community.shopify.com/t/who-to-contact-about-scams/686903)
**Author:** [@OutdoorGo](https://community.shopify.com/u/OutdoorGo)\ **Replies:** 4\ **Last updated:** [September 23, 2026, 8:18pm UTC](https://community.shopify.com/t/who-to-contact-about-scams/686903 "2026-09-23T20:18:07Z")
Pretty sure I have been scammed. There’s an outdoor website campingsuffolk co uk which seemed to have great discount on camping gear I have (now I think about it) recently looked at on AliExpress and various other sites… --- ## [Persistent malicious bot traffic via Shopify domain (.myshopify.com) – ongoing for 3 months with no resolution](https://community.shopify.com/t/persistent-malicious-bot-traffic-via-shopify-domain-myshopify-com-ongoing-for-3-months-with-no-resolution/580766)
**Author:** [@Nancy88](https://community.shopify.com/u/Nancy88)\ **Replies:** 57\ **Last updated:** [September 19, 2026, 10:31am UTC](https://community.shopify.com/t/persistent-malicious-bot-traffic-via-shopify-domain-myshopify-com-ongoing-for-3-months-with-no-resolution/580766 "2026-09-19T10:31:43Z")
I’m posting here to ask whether other merchants are experiencing the same issue. For the past three months, our store has been receiving a large volume of malicious bot / crawler traffic accessing the site directly via … --- ## [Cloudflare “Your connection needs to be verified” challenge when running Playwright tests](https://community.shopify.com/t/cloudflare-your-connection-needs-to-be-verified-challenge-when-running-playwright-tests/664584)
**Author:** [@anand\_sns](https://community.shopify.com/u/anand_sns)\ **Replies:** 3\ **Last updated:** [August 17, 2026, 10:35am UTC](https://community.shopify.com/t/cloudflare-your-connection-needs-to-be-verified-challenge-when-running-playwright-tests/664584 "2026-08-17T10:35:39Z")
I’m working on automated visual regression testing for a Shopify store using \*\*Playwright \*\* When I access the Shopify storefront manually through a normal browser, everything works correctly. However, when I run the … --- ## [High volume of bot traffic from specific countries (Bangladesh, India, Nepal) – bypassing Cloudflare and affecting Shopify Analytics](https://community.shopify.com/t/high-volume-of-bot-traffic-from-specific-countries-bangladesh-india-nepal-bypassing-cloudflare-and-affecting-shopify-analytics/606719)
**Author:** [@BrunnoMagnavita](https://community.shopify.com/u/BrunnoMagnavita)\ **Replies:** 7\ **Last updated:** [August 12, 2026, 2:29pm UTC](https://community.shopify.com/t/high-volume-of-bot-traffic-from-specific-countries-bangladesh-india-nepal-bypassing-cloudflare-and-affecting-shopify-analytics/606719 "2026-08-12T14:29:36Z")
Hello everyone, I’m experiencing a persistent issue with high volumes of suspicious traffic on my Shopify store, and I’d like to understand if this is a known limitation or if there’s any effective solution within Shopi… --- ## [Prod app key rotation](https://community.shopify.com/t/prod-app-key-rotation/651462)
**Author:** [@tazapay-suraj](https://community.shopify.com/u/tazapay-suraj)\ **Replies:** 4\ **Last updated:** [July 24, 2026, 4:11am UTC](https://community.shopify.com/t/prod-app-key-rotation/651462 "2026-07-24T04:11:41Z")
Hi Team, I have a Shopify offsite payment app which is public from 2021, and i have not yet migrated to expiring tokens. I want to immediately rotate my app secret key. My concern is do i need to ask merchants to rein… --- ## [Shopify Anthropic Connector Security Gaps](https://community.shopify.com/t/shopify-anthropic-connector-security-gaps/639167)
**Author:** [@David\_SL](https://community.shopify.com/u/David_SL)\ **Replies:** 0\ **Last updated:** [June 23, 2026, 8:04am UTC](https://community.shopify.com/t/shopify-anthropic-connector-security-gaps/639167 "2026-06-23T08:04:32Z")
Org-level MCP access control setting (allowlist by user or role). Currently anyone in the company with shopify access from customer support to marketing, can connect claude desktop via the shopify app which is ‘availabl… --- ## [Bot attack?](https://community.shopify.com/t/bot-attack/573743)
**Author:** [@HTX-Fluid-Power](https://community.shopify.com/u/HTX-Fluid-Power)\ **Replies:** 9\ **Last updated:** [May 12, 2026, 1:34am UTC](https://community.shopify.com/t/bot-attack/573743 "2026-05-12T01:34:54Z")
I’ve had almost 300 sessions today and 220 yesterday all from China and have never had this happen before. This is very odd as I do not sell in China. Our checkout does not allow checkout outside of the US. I reached … --- ## [Title: 2,066 bot accounts created in my store using okhttp/5.3.2 — Shopify declining platform-level fix](https://community.shopify.com/t/title-2-066-bot-accounts-created-in-my-store-using-okhttp-5-3-2-shopify-declining-platform-level-fix/607939)
**Author:** [@iamarelius](https://community.shopify.com/u/iamarelius)\ **Replies:** 3\ **Last updated:** [April 18, 2026, 1:15am UTC](https://community.shopify.com/t/title-2-066-bot-accounts-created-in-my-store-using-okhttp-5-3-2-shopify-declining-platform-level-fix/607939 "2026-04-18T01:15:36Z")
Hi everyone, I run a digital sheet music store on Shopify and wanted to share what I’ve been dealing with over the past several weeks in case others are experiencing the same thing. Since January 2026, a bot has been s… --- ## [Constant views/carts/checkouts from Kansas](https://community.shopify.com/t/constant-views-carts-checkouts-from-kansas/607808)
**Author:** [@HTX-Fluid-Power](https://community.shopify.com/u/HTX-Fluid-Power)\ **Replies:** 2\ **Last updated:** [April 16, 2026, 4:35am UTC](https://community.shopify.com/t/constant-views-carts-checkouts-from-kansas/607808 "2026-04-16T04:35:06Z")
For a while now, I have been getting many views/carts/checkouts daily from this same location in Kansas. They are not showing up in logs or as real carts/checkouts. Assuming these are bot views? Anything to be worried… --- ## [二段階認証について](https://community.shopify.com/t/topic/587162)
**Author:** [@webe](https://community.shopify.com/u/webe)\ **Replies:** 0\ **Last updated:** [February 4, 2026, 5:42am UTC](https://community.shopify.com/t/topic/587162 "2026-02-04T05:42:46Z")
Shopifyの運用について質問です。 制作者側で初期構築を行い、 その後クライアント側へオーナー権限を移譲した場合、 クライアントが2段階認証を有効にすると、 修正や設定変更のたびに認証コードを都度確認してもらう必要があり、 運用面で手間が発生してしまっています。 セキュリティ上2段階認証が必須なのは理解しているのですが、 実務上かなりスピードが落ちてしまうため悩んでいます。 ・オーナーは制作側のままにしている ・ス… --- ## [Shopify log in RECOVERY CODES CAN BE HACKED and used to bypass 2 step authentication](https://community.shopify.com/t/shopify-log-in-recovery-codes-can-be-hacked-and-used-to-bypass-2-step-authentication/584231)
**Author:** [@Ejo](https://community.shopify.com/u/Ejo)\ **Replies:** 1\ **Last updated:** [January 20, 2026, 12:16am UTC](https://community.shopify.com/t/shopify-log-in-recovery-codes-can-be-hacked-and-used-to-bypass-2-step-authentication/584231 "2026-01-20T00:16:43Z")
Our Shopify account was hacked today with an unauthorized log in. The hacker was able to access our Shopify payout account and the associated Shopify digital debit card to make a payment to themselves. We have 2 step aut… --- ## [Shop data security](https://community.shopify.com/t/shop-data-security/579861)
**Author:** [@PawelJonca](https://community.shopify.com/u/PawelJonca)\ **Replies:** 2\ **Last updated:** [December 29, 2025, 1:49am UTC](https://community.shopify.com/t/shop-data-security/579861 "2025-12-29T01:49:03Z")
Hi all, If this topic has already been discussed somewhere, I apologize, but I couldn’t find it. As a beginner in Shopify, I have an observation and concern, possibly resulting from ignorance: does installing various a… --- ## [Does Shopify have a plan to mitigate the React vulnerability CVE-2025-55182 and publish a statement?](https://community.shopify.com/t/does-shopify-have-a-plan-to-mitigate-the-react-vulnerability-cve-2025-55182-and-publish-a-statement/578984)
**Author:** [@sjfraser](https://community.shopify.com/u/sjfraser)\ **Replies:** 0\ **Last updated:** [December 9, 2025, 8:01pm UTC](https://community.shopify.com/t/does-shopify-have-a-plan-to-mitigate-the-react-vulnerability-cve-2025-55182-and-publish-a-statement/578984 "2025-12-09T20:01:11Z")
I am looking for some information on what affect (if any) the latest React Vulnerability has on the Shopify Infrastructure for our Cyber-Security committee. Usage of Affected Packages: Are any of the systems, services… --- ## [Suspicious Emails!](https://community.shopify.com/t/suspicious-emails/574717)
**Author:** [@securecommerce](https://community.shopify.com/u/securecommerce)\ **Replies:** 0\ **Last updated:** [November 8, 2025, 3:20pm UTC](https://community.shopify.com/t/suspicious-emails/574717 "2025-11-08T15:20:32Z")
Hey all, There’s always a lot of buzz in the security world about the latest ransomware campaign or major hack. But really for Shopify stores, its the simple threats that pose the greatest risk: suspicious emails. While… --- ## [What's the one thing that could have prevented a data breach?](https://community.shopify.com/t/whats-the-one-thing-that-could-have-prevented-a-data-breach/572940)
**Author:** [@jasonh](https://community.shopify.com/u/jasonh)\ **Replies:** 3\ **Last updated:** [November 7, 2025, 2:49pm UTC](https://community.shopify.com/t/whats-the-one-thing-that-could-have-prevented-a-data-breach/572940 "2025-11-07T14:49:44Z")
I find the root cause of big data breaches rather fascinating. It’s often one small oversight that leads to snowballing disaster. Think of a major breach you’ve read about. What’s the one single biggest preventative mea… --- ## [Shopify Domain Has been Hijacked](https://community.shopify.com/t/shopify-domain-has-been-hijacked/572951)
**Author:** [@1202digi](https://community.shopify.com/u/1202digi)\ **Replies:** 0\ **Last updated:** [October 28, 2025, 4:56pm UTC](https://community.shopify.com/t/shopify-domain-has-been-hijacked/572951 "2025-10-28T16:56:29Z")
Hi, I have spotted that someone is hosting a shopify store on one of my domains that is pointing to an old store. The strange thing is that I deactivated the store last month. The DNS entry for the domain still still …