How to stop fake email signups in Shopify

Shopify stores see the same pattern in the community forums: a wave of newsletter signups overnight, random names, addresses at real domains, and a customer list that grows while sales don't. Every one of those signups becomes a customer record with email marketing consent, so your next campaign goes straight to them.

Bots don't open, click or buy. They bounce, and some sign up real people's addresses, which turns your newsletter into mail nobody asked for. You fix it in two places: at the form, where you slow the bots down, and at the customer record, where you check each address before you mail it.

The short version

  • Shopify admin access with permission to manage settings and customers
  • A ZapBounce API key, plus either a Zapier account or a small server endpoint you control

The steps

  1. Turn on Shopify's spam protection

    In your admin, open Online Store, then Preferences, and switch on hCaptcha for your forms. That stops a large share of scripted signups before Shopify ever creates a customer.

  2. Send new customers to a check

    Open Settings, then Notifications, then Webhooks, and create a webhook for the Customer creation event in JSON. Point it at your endpoint. If you'd rather not host anything, start a Zap with the Shopify New Customer trigger instead.

  3. Verify the address with ZapBounce

    Your endpoint reads the customer's email from the webhook and calls POST /v1/verify. In Zapier, add the ZapBounce Verify email action. Either way you get valid, invalid, catch_all or unknown, with disposable and role flags beside it. The real-time verification page shows the full response.

  4. Tag the customer with the result

    Write the result back to the customer as a tag, such as email-invalid or email-disposable. Tags show in the customer list, and you can filter and build segments on them.

  5. Unsubscribe the fakes from email marketing

    For every customer tagged invalid or disposable, set email marketing consent to not subscribed. Shopify Email and any app that syncs consent will then skip them on every send.

  6. Hold the welcome email until the check lands

    If a marketing app sends your welcome series, add a short delay at the top and filter on the tag. The check usually finishes long before the delay does.

  7. Clean the customers you already have

    Export customers from the Customers page as CSV and run the file on the bulk page. Filter on the result column, then tag or unsubscribe the bad rows in one pass.

Why bots target Shopify newsletter forms

Your footer signup form is public, simple and posts straight into your customer list. That makes it an easy target for scripts that test stolen addresses or spray random ones at any form they find.

Fake addresses at real domains come back invalid and never reach a send. Real people's addresses signed up by a bot are harder, so pair verification with Shopify's double opt-in for email marketing. Only the owner of the inbox can confirm, and the bot can't.

Checking the address before Shopify sees it

A custom signup form, a headless storefront or an app proxy can call ZapBounce first and only create the customer when the result isn't invalid and disposable is false. Keep your API key on the server. A key in theme JavaScript is readable by every visitor.

Show the did_you_mean suggestion when there is one. Someone who typed gmial.com and gets a one-tap fix stays a real subscriber. Never let a check block checkout: a paying customer's order always goes through. The Shopify integration page covers the checkout side.

What verifying Shopify signups costs

Each new customer costs one credit when a mail server gave us an answer. An unknown is never billed, duplicates are never billed, and credits never expire, so a quiet month costs you nothing. Checks start at $5 for 1,000, and every account gets 100 free checks a month with no card. Details are on the pricing page.

Questions people ask

How do I stop spam signups on my Shopify store?

Turn on hCaptcha in Online Store Preferences, then verify every new customer's email as Shopify creates the record. Unsubscribe the invalid and disposable ones from email marketing so no campaign reaches them.

Why is my Shopify store getting fake customer accounts?

Most waves of fake Shopify customers come from bots that fill any public form, usually the footer newsletter signup. Each submission creates a customer with marketing consent, which is why the list grows while orders stay flat.

How do I delete fake customers in Shopify?

Export your customers, verify the file, and tag every invalid or disposable row. Filter the customer list on that tag, then delete or unsubscribe them in bulk. Customers with orders can't be deleted, so unsubscribe those instead.

Will verifying signups slow down my Shopify store?

No. The check runs after Shopify creates the customer, through a webhook or a Zap, so shoppers never wait on it. Only a custom form that checks before signup adds a call, and that call should fail open on a timeout.

Run your list through it

100 free checks a month, no card. Every address comes back with one verdict, and unknowns are never billed.