📨

Bug Report | Merchant Store Accounts Facing Increased Spam

🤖 Reporter

👀 Problem

Partner Support Ticket Number: N/A

Shopify merchants are facing increased spam attacks on their store that are leading to low quality contacts on their store. This can cause secondary issues such as triggering email automations (thereby lowering email reputation), increased time spent cleaning out contact lists, and potentially increased costs from their apps
Link:

List of merchants we’ve observed being affected

Context

We've been noticing more and more Shopify accounts being attacked by these types of bots that put in real email addresses with bogus first and last names. It seems like they preferred Avenue of attack is by actually creating customer accounts on the merchants store. We know this because we have conversed with a couple of different merchants that confirmed that all these accounts were created by the spot, unfortunately, we don't have evidence of that anymore because the merchants that we worked with already deleted those accounts.

You can also see additional complaints from other:

💭 Proposal

Shopify add captcha or additional mechanisms like not allowing emails with “+” special character to be submitted when a store account is created.