Scammers hijack real Shopify notifications to swindle victims — here's how to stay safe
Would you recognize a fake notification if it came directly from Shopify? Some scammers are betting you wouldn't.
A new scam is targeting Shopify store owners and users by exploiting fake refund notifications. Huntress researchers have uncovered a method that takes advantage of Shopify's infrastructure to deceive unsuspecting victims. Attackers create a fake Shopify store or compromise an existing one, then place a fake order with the target's contact details.
The notification appears within the victim's Shopify app, making it difficult to distinguish from legitimate messages. To add an extra layer of deception, the attackers include contact information in the shipping address, hoping to prompt victims into returning the funds. The scam's effectiveness relies on victims' haste, fear, and overworked state.
To avoid falling prey to this scam, users should ignore suspicious information, verify refunds, and report any fake stores.
Written by urgent.news from TechRadar's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
