BlocklyTechnical deep dives
How detection works under the hood: IP intelligence, device fingerprinting, Shopify Functions, APIs and the edge cases that trip up fraud rules.
Rate Limiting Your Shopify Storefront Against Bots
Rate limiting stops bots without hurting shoppers — if you get the thresholds right. Learn per-IP and per-session limits, burst vs sustained, challenge vs block, and false positives.
Shopify Functions for Fraud Filter — How They Work in 2026
Shopify Functions power the new generation of fraud-prevention apps. Learn how server-side checkout rules work and why they cannot be bypassed.
Blocking IPv6 Traffic on Shopify
IPv6 changes how you block abusive visitors on Shopify. Learn how /64 prefixes work, why blocking single IPv6 addresses fails, and how to filter ranges without breaking mobile shoppers.
Blocking Tor Bridges, Not Just Exit Nodes
Most stores block Tor exit nodes and call it done. But bridges route around every public list, letting fraudsters slip past. Here is how layered blocking closes the gap on your Shopify checkout.
Honeypot Fields to Stop Form Bots
Spam bots pound your contact and newsletter forms with fake submissions. Honeypot fields are a lightweight, invisible trap that filters most of them out—without the friction of CAPTCHAs. Here's how to add them to Shopify.
Protecting Your Shopify Storefront APIs from Abuse
Your Storefront and AJAX APIs power modern shopping experiences—and attract scrapers, credential stuffers, and inventory hoarders. Learn how rate limits, token hygiene, and monitoring keep your endpoints safe.
Hardening Your Shopify Theme's Security
Your theme is the one part of Shopify you fully control, which makes it the most common place stores leak data or ship malicious scripts. Audit risky snippets, third-party tags, and app permissions before they cost you.
Put these guides
into practice.
Block fraud, customize checkout and stay EU-compliant with apps built by the team behind this blog.
- Free plans
- No code
- Built for Shopify
