HomeHelp CenterVPN, Proxy, and Tor Blocker

VPN, Proxy, and Tor Blocker

Updated May 15, 2026

VPN traffic is the single biggest source of Shopify chargeback fraud. Shieldy detects four masked-traffic categories and lets you block each independently.

The four categories

CategoryExamplesDefault action
Commercial VPNNordVPN, ExpressVPN, SurfsharkChallenge
Residential proxyLuminati, Smartproxy, OxylabsBlock
Datacenter / hostingAWS, GCP, OVH, HetznerBlock at checkout
Tor exit nodesPublic Tor relaysHard block

Enable VPN blocking

  1. Open Bot Killer.
  2. Toggle Auto-block VPN/Proxy to ON.
  3. Choose action: Block / Challenge / Redirect.
  4. Optional: set confidence threshold (0.0-1.0, default 0.7).
  5. Save.

VPN detection is included in the Premium plan at $4.99/mo.

Enable Tor blocking

  1. Open Bot Killer.
  2. Toggle Auto block Tor to ON.
  3. Set action to Block (challenge does not stop Tor).
  4. Save.

Tor blocking is in the Enterprise plan ($8.99/mo). Tor exit-node list refreshes every 30 minutes.

Enable datacenter blocking

  1. Open Bot Killer.
  2. Toggle Block datacenter IPs to ON.
  3. Save.

Blocks AWS, GCP, Azure, OVH, Hetzner, and ~80 other hosting providers. Note: B2B stores with corporate cloud-based browsers may need to whitelist specific ranges.

Confidence threshold tuning

The threshold controls how aggressively to block:

  • 0.5 — aggressive (more false positives, fewer fraud orders)
  • 0.7 — balanced (default)
  • 0.85 — conservative (fewer false positives, some fraud gets through)

Start at 0.7 and adjust based on the dashboard's false-positive complaints.

Whitelist corporate VPNs

If your B2B customers use corporate VPNs:

  1. New rule → Rule type Whitelist → IP address.
  2. Enter the corporate VPN exit IP range.
  3. Save.

How accurate is the detection?

  • Commercial VPN: ~99.7 %
  • Tor: ~99.5 %
  • Residential proxy: ~95 %
  • Datacenter: ~99 %

Database refreshes every 15 minutes from 40+ sources (BGP data, honeypots, ISP records, scanning).

See also