How to report a phishing site to Shopify

Hosting providerStorefront platform — common for fake shops.

How to reach them

Write the report

Paste the link, phone number or email address and we'll write the message for Shopify. You send it yourself.

Sites on these addresses

Shopify owns the parent domain, so it can remove a page on any of these directly — no registrar involved.

  • *.myshopify.com

What to include

  • Include the full URL, not just the domain.
  • Attach a screenshot and the date/time you saw it.
  • State plainly that it is phishing or fraud, and what it impersonates.

Not sure who hosts the site?

Scan it — we'll identify the host and registrar and give you the routes that apply.

Scan a website

These details have not been re-checked against Shopify's official page recently. Confirm before relying on them.