How to Stop Fake Account Signups & Form Spam on Shopify

Disclosure: SpamShield is built by JMS Dev Lab, the publisher of this blog. It handles one part of this problem — contact and enquiry-form spam — and most of the fixes below are native Shopify settings that cost nothing. We say clearly which tool solves which part.

If you have opened your Shopify customers list and found dozens of accounts you never sold to — often created in bursts, with junk email addresses, sometimes hundreds in a day — you are seeing bot signups. The same wave usually shows up as fake newsletter subscribers and spam contact-form messages. It is one of the most common Shopify complaints, and the good news is that most of it is stoppable with settings you already have.

The important thing to get right first: account-creation spam and contact-form spam are two different problems with two different fixes. Merchants waste time because they reach for one tool and expect it to solve both. Here is what actually works for each.

Fixing Fake Customer-Account Signups

These are bots hitting your account-registration page. The single most effective fix is native to Shopify:

Require email verification on account creation. Shopify's newer customer accounts use a one-time email code instead of a password. When verification is required, an account is not created until the person enters the code sent to their address — and the overwhelming majority of signup bots cannot complete that step, because they are submitting addresses they do not control. This alone shuts down most fake-account spam. Set it under Settings → Customer accounts.

Turn on Shopify's bot protection. Under Settings, Shopify provides bot protection for checkout and hCaptcha for its forms. It is a free first layer — not sufficient alone against determined or human-driven spam, but worth having on.

Clean up the accounts already on file. Filter your customers by "no orders" and creation date, and bulk-remove the obvious bot batches. Left in place, they inflate your customer count, skew your analytics, and — if you sync customers to email — pad your list with dead addresses.

Fixing Newsletter and Form Signup Spam

These are bots submitting fake addresses through your newsletter box and contact form. Different fixes apply:

Use double opt-in on your newsletter. A confirmation email means a bot-submitted address never actually subscribes, because it cannot click the confirm link. This eliminates most newsletter list poisoning and is a simple toggle in Shopify Email or your email platform.

Filter your contact and enquiry forms. This is the piece a native setting does not cover well, because a lot of contact-form spam is human-written (SEO pitches, cold outreach) that sails past a CAPTCHA. A filter-based tool that reads and blocks spam submissions — like SpamShield for Shopify — stops that stream at the form without showing real customers a challenge. Compare the options in the Shopify spam-filter round-up.

Add a honeypot and timing check to custom forms. If you have theme-level or app-built forms, a hidden honeypot field and a minimum time-to-submit rule catch a large share of cheap automated spam with zero impact on real visitors.

Why This Is Worth Doing

Fake signups are not a cosmetic annoyance. They inflate the customer and subscriber counts you make decisions from. If you sync customers or subscribers to Klaviyo, Mailchimp or Shopify Email, every bot address is one you pay to store and mail — and mailing dead addresses damages your sender reputation, which quietly pushes your real customer emails toward the spam folder. We cover that knock-on effect in detail in how form spam wrecks your email deliverability.

The Short Version

For fake account signups: require email verification and turn on Shopify's bot protection, then clean out the bot accounts already created. For fake newsletter signups: switch on double opt-in. For contact-form spam — the human-written kind a CAPTCHA misses — add a filter like SpamShield. No single tool does all three; the combination does, and most of it is free.

SpamShield filters Shopify contact-form spam before it reaches your inbox — free to install, free for up to 100 blocks a month.

Related reading: How Form Spam Wrecks Your Email Deliverability · Best Contact-Form Spam Filters for Shopify (2026) · 5 Types of Shopify Contact Form Spam That Aren't Bots · SpamShield vs CleanTalk · SpamShield.