Vent: almost lost my Shopify store to a fake login page phishing scam

Last Tuesday I got an email saying my Shopify account had unusual activity and clicked the link without thinking, it took me to a page that looked exactly like the real login but the URL was off by one letter. My password manager refused to autofill and that small thing saved me because I would have typed in my credentials otherwise. Has anyone else almost fallen for these super realistic lookalike login pages and what do you use to spot them besides checking the URL?

2 comments

2 Comments

terryk281mo ago

elliotm70, how long you been running a real store?

elliotm701mo ago

Call me crazy but I think people overthink this stuff. I've been using Shopify for years and never once had my credentials stolen because I just don't click links in emails about my store at all. If you're already logged in on your browser the real Shopify isn't gonna email you about unusual activity... they'd just lock you out or text you. The fake page looked real because you wanted it to be real, that's the real trap.

-1