Shopify Retailers: Watch Out for This $50,000 Credit Fraud Scam

This is not a regular Tidbits issue. This is an urgent warning for any retailer using Shopify. Please read it and share it.

---

If You Use Shopify, Read This

I visited a store this week that got hit by a scary scam, and I want every one of you to know about it.

Here’s how it works: Criminals break into a store’s Shopify account, apply for a Shopify Credit line in the store’s name — we’re talking $30,000 to $50,000 — spend it, and disappear. The store owner is left holding the bill. And right now, Shopify is not stepping up to help.

The #1 warning sign: Your inbox suddenly fills with hundreds of spam emails. That’s not random. The criminals are flooding your email on purpose to bury the Shopify notifications — the ones that say “Welcome to Shopify Credit” and “Your new credit line has been approved.” By the time you dig through the junk, the damage is done.

And here’s what makes it worse: The hackers know that Shopify has no phone support. You cannot call anyone at Shopify. Everything is email and chat — which means while your inbox is being bombed and you can’t find anything, you also can’t just pick up the phone and say “freeze my account.” The criminals are counting on that delay.

What To Do Right Now To Protect Yourself

• Turn on two-factor authentication using an authenticator app (like Google Authenticator), NOT text messages — scammers can hijack your phone number
• Check your email filters — hackers create rules that auto-delete Shopify emails so you never see them
• If your inbox suddenly explodes with spam — stop everything and check your Shopify admin immediately. Look for any credit applications, account changes, or unfamiliar logins
• Use a unique password for Shopify that you don’t use anywhere else

This happened to a real store. It happened to another store in Chicago earlier this year. It’s a pattern, and it could happen to any of us. Five minutes of prevention now could save you $50,000 and months of headaches.

---

If This Is Happening To You RIGHT NOW

If you’re reading this and it’s already happening — here’s your emergency checklist:

1. Log into your Shopify admin directly — don’t click any email links. Type the URL yourself.
2. Change your password immediately and reset your two-factor authentication
3. Check for any active Shopify Credit or Shopify Capital applications — if you see one you didn’t apply for, screenshot it
4. Check your bank/payout settings — make sure your bank account hasn’t been changed
5. Call your bank and freeze the linked account — have them restrict it to deposits only (no withdrawals, no bill pay). Open a separate account at the same bank for paying bills. Do NOT change the bank account on your Shopify store — you still need payouts to come through while you sort this out, and changing it could complicate your case
6. Check your email filters — look for any rules you didn’t create and delete them
7. File a police report — you need a case number before anything else can move forward
8. File an FTC identity theft report at identitytheft.gov — this generates an official recovery plan
9. File a CFPB complaint at consumerfinance.gov/complaint — this is the agency that oversees credit issuers like Shopify’s lending partner
10. File a complaint with your state Attorney General — search “[your state] attorney general consumer complaint” to find the right office. Every state has one, and they take fraud reports seriously
11. Consult a consumer protection attorney — many offer free consultations. The Fair Credit Billing Act limits your liability for unauthorized credit.

Do not wait for Shopify to fix this for you. The filings above create a paper trail that protects you legally, and they’re what actually put pressure on Shopify to act.

---

Your Key Legal Argument

You did not apply for or authorize this credit line. This is business identity theft. Shopify approved a credit line without verifying the actual business owner’s identity. Under the Fair Credit Billing Act, you should not be liable for unauthorized credit transactions reported promptly. The burden is on Shopify to prove you authorized it — not on you to prove you didn’t.

Three laws are on your side:

• Fair Credit Billing Act (FCBA) — limits liability for unauthorized credit
• Fair Credit Reporting Act (FCRA) — if credit bureaus mishandle your dispute
• Your state’s Consumer Protection Act — every state has one. Search “[your state] consumer protection act” or ask your attorney which statute applies

---

This is a known scam pattern. In January 2026, a Chicago vintage shop called Lost Girls Vintage was hit the exact same way — $33,400 in fraudulent Shopify Credit charges. It was covered by FOX 32 Chicago. If you want to learn more, search “Lost Girls Vintage Shopify” for the full story.

Please share this with any retailer you know who uses Shopify. The more of us who know about this, the harder it is for these criminals to succeed.

xoxo,
❤️AmyFay

---