Blog
Practical guides on bots, scrapers, proxy fraud, and country blocking. Useful whether or not you ever install Cordon.
A run of small declined orders overnight is not a glitch. It is someone checking stolen cards against your checkout. Here is how to confirm it, stop it today, and keep your payment processor happy.
Read the guide →
AI crawlers and shopping agents are visiting Shopify stores in growing numbers. Here is how to tell which ones are real, what they take, and why blocking all of them is usually the wrong call.
Read the guide →
Your descriptions and photos have turned up on a marketplace or a lookalike store. Here is how they were collected, what you can realistically stop, and what to do about the copy that already exists.
Read the guide →
Every Shopify store publishes its full product list at /products.json with no password. Here is exactly what it exposes, why you cannot switch it off, and what actually reduces the damage.
Read the guide →
Sessions are up and orders are not. Before you rebuild the product page again, work out how much of that traffic is people. Here is how to check, and the boring causes to rule out first.
Read the guide →
A Shopify store took 33,700 visits in 22 hours. 21,840 came from one datacenter network. Here is how to find the same pattern in your own logs.
Read the guide →
A clear answer on what Shopify blocks natively and what it does not. Shopify handles DDoS and platform security, but does not block bots, scrapers, VPNs, or countries at the visitor level.
Read the guide →
How to allowlist countries on Shopify so only your target markets can browse. Everyone else is blocked, and Google stays fully allowed for SEO.
Read the guide →
Bots and click farms inflate your Shopify ad clicks and drain your Meta and Google budget. Here is how to spot invalid traffic and block it before it burns your ad spend.
Read the guide →
Tor traffic is a common source of card testing and abuse on Shopify. Here is how to block Tor exit nodes on Shopify, why it is safe to do, and how it differs from blocking VPNs.
Read the guide →
Shopify secures the platform, checkout, and PCI. You own your accounts, apps, staff, and who you let in. A practical 2026 security checklist for merchants.
Read the guide →
Fake customer accounts and newsletter spam are automated bulk traffic. Block bots, proxies, and datacenter IPs at the visit to remove most of it without friction.
Read the guide →
How to disable right-click on Shopify, why it is mostly theater against scrapers, and what actually stops competitors cloning your images and catalog at scale.
Read the guide →
Shopify has no built-in VPN block. Here is how to block VPN, proxy, and Tor traffic on Shopify in 2026 without blocking iPhone users on Private Relay or your real customers.
Read the guide →
Competitors run bots that poll your product pages and /products.json to undercut you. Here is how price scraping works and the detection that slows it down.
Read the guide →
Checkout bots empty Shopify drops in seconds. What Shopify covers natively, how bots actually work, and how to block datacenter ASNs and headless browsers.
Read the guide →
Most chargeback tools act after the order exists. Blocking fraud traffic at the visit stops card testing before fees, disputes, and rate damage begin.
Read the guide →
For merchants, blocking GPTBot or ClaudeBot removes you from AI shopping answers. Allow verified AI crawlers, block the scrapers that impersonate them.
Read the guide →
Shopify has no built-in visitor-level IP blocking. What Shopify can do natively, why theme hacks fail, and how to block IPs, ranges, and networks properly.
Read the guide →
Bot traffic on Shopify looks like a spike with zero extra sales and a collapsing conversion rate. How to recognize it in your reports and stop the bad bots.
Read the guide →
Discount code abuse on Shopify: how one buyer farms welcome codes behind rotating proxies, why email limits fail, and how to block the anonymizing layer.
Read the guide →
An ASN identifies a network operator like AWS or Comcast. Bot IPs rotate constantly but the ASN stays stable, so one ASN block can stop a scraper farm.
Read the guide →
A fair comparison of Blockify, Cordon, and Blocky across detection quality, blocking layer, performance, SEO safety, GDPR handling, and pricing.
Read the guide →
A bot blocker only hurts SEO if it blocks verified crawlers. Learn how Googlebot verification works and how to block scrapers without losing rankings.
Read the guide →
VPN and proxy checkout fraud hides stolen cards behind rotating IPs. Learn how to read the signals and block VPN traffic on Shopify before orders happen.
Read the guide →
Every Shopify store exposes its full catalog by default. Here is how scrapers take it, why robots.txt fails, and the detection layers that actually stop them.
Read the guide →
Shopify has no built-in visitor-level country block. Here are three ways to block a country on Shopify, from liquid hacks to purpose-built blocking apps.
Read the guide →
