Skip to content
Back

Shopify app phishing attacks

Is your store affected by Shopify app phishing?

Recent attacks through Shopify apps have redirected shoppers to fake checkouts. Check whether a shopping journey in your store attempts to send customers to an unfamiliar website.

Free check for your store

Check your store for suspicious checkout redirects

Enter your Shopify store or a product URL. The check opens a desktop browser, tries to add a product to the cart and follows the checkout button. It records unfamiliar destinations without entering customer or payment details.

  • No email required
  • Desktop browser
  • Stops before payment

Use a public Shopify storefront or a product that is available to buy.

One browser journey. No login, payment details or order placed. Reports can be retrieved for up to 15 minutes. Server copies stay in memory, not a database.

How the check works

From your store URL to the results

We test the checkout button customers use, so a redirect there can be observed. A completed check covers one desktop shopping journey.

  1. Enter your store URL

    Use your Shopify store or an available product you are authorized to check. A product without required personalization gives the checker a simpler starting point.

  2. Run the checkout test

    The browser opens a product, tries to add it to the cart and clicks through to checkout. The report shows which steps completed and where the browser attempted to go.

  3. Review the results

    Look at the screenshots, recorded destinations and app signals. If a destination is unfamiliar, have it checked. If a step could not be completed, the result remains inconclusive.

What this phishing check covers

What this check can show

  • Whether this desktop journey reaches an expected checkout
  • The destinations observed along the way
  • Screenshots and visible app or service signals

What needs a closer assessment

  • Other products, devices, regions and session conditions
  • The full installed-app inventory and its permissions
  • Provider backend security, patch status and historical exposure
Read our Shopify app security investigation

Review the apps behind your store

A checkout test is the first step. Know which apps your store depends on.

We review your installed apps, their access and their role in your store. You get a prioritized assessment of the risks, what needs checking with providers and which changes to make next.

Book an app security advisory

A focused conversation about your store, its apps and the next useful step.

Get in touch