Skip to main content

Email templates - Report phishing Shopify stores

Guidelines:​

  • Đây là email report những shop cài AVADA và gửi email/sms có nội dung k minh bạch, lừa đảo, trái pháp luật.
  • Email report gửi đến safety@shopify.com
  • Nội dung:
    • Giới thiệu mình là ai, cung cấp app gì
    • Mô tả lại hành vi gửi message phishing của merchant. Cần cung cấp:
      • Shop domain
      • Ảnh chụp message phishing, có chứa sender
      • Thời gian gửi và gửi bao nhiêu messages
      • Link trong message là gì, dẫn tới đâu
      • Chup cả app, link độc hại

SMS phishing:​

Hi Shopify team,

I am Rainy from AVADA - Shopify app provider. I want to report a Shopify store that installed AVADA Marketing Automation app then sent SMS phishing to many contacts.

Here is the shop domain: orychristiane.myshopify.com

Here is the SMS phishing they sent: https://imgur.com/keFlsdy When we click on the link in SMS, it goes to Google warning page like this: https://imgur.com/2RyOJy9

Please help us to review this shop and block them instantly to prevent illegal activities that can affect Shopify customers as well as Shopify’s reputation. We notice that this is the same guy from HongKong who created many Shopify accounts and installed our app to send phishing messages. You can re-check some of my last emails reports to safety@shopify.com.

Also, we are using reportabuse@avada.io to receive any abuse/phishing reports regarding our app users. If Shopify notices any case like this, please also let us know so that we can take immediate action.

Hope to hear back from you soon!

Thank you,

Rainy

Email Phishing dùng HTML:​

Hi Shopify team,

This is Rainy from https://avada.io/. We are providing an email/sms marketing platform for Shopify stores. And we detected some phishing activities from some of our app users. Detailed below:

I guess this is s same person trying to install our app and send email with the content like this: https://imgur.com/mv0ojkv

They are properly developers so they write email in html and pretend to be Shopify on behalf. (You can see the email preview with Shopify signature). The email sender is nearly similar to Shopify so that recipients thought it comes from Shopify. Some email senders they add are: mail@shopity.center, mailer@shopity.center And here are those Shopify stores who installed our app then send email phishing: freda-magic.myshopify.com beau-sonny.myshopify.com, stateline-us.myshopify.com

I reported those shops to you with the hope that Shopify can check and shut down those shops immediately to prevent any unwanted loss for your customers as well as Shopify reputation. Also, please make sure there is no security hole in your system. If you need me to provide more information on the email content, please let me know. I can send you the html email. Hope to hear back from you soon!

Best regards,

Rainy

Email phishing drag-drop editor:​

Hi team,

This is Rainy from AVADA. We are providing marketing automation app (email/sms) for Shopify stores.

This store irish-hide-designs.myshopify.com installed AVADA Marketing Automation app 1 day ago. Then they started to send a newsletter email to over 30k contacts. However, after sent out 1.4k contacts, our system detected phishing then suppressed their account.

Please help me test this again so that you can see exactly how they are trying to do.

I hope Shopify can shut down this store as soon as possible to prevent them from further phishing actions. Also, it seems Shopify has a hole in security regarding Shopify payment so those guys can abuse it to steal customer credit.

Please investigate more on the root of this problem. And I hope to hear back from you about inactivating this merchant.

Thank you,

Rainy