Bot Cleanup: stop bots costing your store money

Shopify now hides bots from your session reports, but they are still in your email list, your abandoned-cart emails and your customer list. We clean that up and show you what it was costing.

$349

Founding price $249 for the first 3 stores, with a published case study

What's included

1. 01

   Bot damage report

   One page, plain English: where the fake traffic comes from (country, referrer, landing page, time pattern), how many fake accounts and checkouts in the last 90 days, and what it is costing you in billed email contacts or sends.

2. 02

   Email list protection

   We check your sign-up form protection (Shopify's hCaptcha and double opt-in, and your email tool's consent setting). We build a segment of profiles that match bot patterns, you review it, and only then are they suppressed. Nothing is deleted. You see the estimated monthly saving before and after.

3. 03

   Abandoned-checkout email guard

   We check that Shopify's abandoned-checkout automation keeps its subscriber-only default and, by default, add a tag-only guard in Shopify Flow so accounts tagged "suspected-bot" get no reminder. A shipping-address condition is optional: we add it only if you approve it in writing, because it also stops reminders for local pickup, digital-only or service checkouts and for real shoppers who leave before the address step. On Klaviyo, we use a subscriber-only and profile-quality filter instead.

4. 04

   Junk tagging in Shopify

   A Shopify Flow workflow tags new customers that match bot patterns as "suspected-bot" for review, and existing junk is tagged in bulk from the list you approve. Tagging is all it does: nothing is deleted. Card-testing orders are flagged for review; holding them is part of the Fraud Hold kit.

5. 05

   Clean reporting

   Session reports shown both ways with Shopify's per-report "Human or bot session" filter, so your conversion rate is believable again. A Google Analytics view that excludes the identified bot sources can be scoped as separate custom work. It is not part of this kit.

6. 06

   Handover note

   What was changed, how to review the "suspected-bot" tag each week, and what to do in a new attack.

Nothing is suppressed or tagged in bulk until you have approved the list, and anyone with an order is never on it. We never delete. You decide.

What's not included

• Blocking bots. No one outside Shopify can block traffic to Shopify-hosted checkout, and we say so up front.
• Cloudflare or firewall configuration in front of Shopify.
• Deleting customers or profiles. We never delete. You decide: removing records is your own decision, outside this kit. Customers with orders are tagged, never deleted, and personal data removal goes through an erasure request.
• Ad account clean-up inside Meta or Google beyond excluding bot sources from reporting.
• Email tools other than Klaviyo, Mailchimp and Shopify Messaging (custom quote).

Shown on our demo store

● Demo environment · Northfield Outfitters (fictional) · synthetic data

Our demo store is a Shopify Plus development store. Every sample customer used reserved test domains or our own test inbox, and was labelled as a test.

• We imported 25 labelled sample customers: 21 bot-like and 4 genuine. Shopify rejected 4 of the bot-like rows at import, so 17 got in.
• The Flow workflow tagged 17 of the 17 imported bot-like customers as "suspected-bot", and 0 of the 4 genuine ones. None of the 19 existing customers were tagged.
• The scoring workbook marked 21 of 21 bot-like rows as suspected bots and flagged 0 of the 4 genuine ones. Anyone with an order is protected and never flagged.
• The default tag-only guard, checked in the Flow run log: a tagged test customer with a full address abandoned a checkout and the reminder step never ran; for an untagged one it did run.
• The safety net: a tagged test customer placed a test order, and Flow removed the suspected-bot tags straight away. Anyone who buys is protected.
• Bulk tagging from an approved list, then two checks that no tagged customer has an order. Both returned 0.
• The optional shipping-address condition, checked in the Flow run log: a test checkout with no shipping address did not reach the email step; a test checkout with an address did.

Your store's bot patterns will differ, so the list is always reviewed and approved by you before anything is suppressed.

FAQ

Doesn't Shopify already filter bots?

From the 21 to 23 September 2026 rollout, Shopify filters identified bot sessions out of session reports by default, and you can show them per report with the "Human or bot session" filter. Bot filtering applies only to sessions-related metrics, and sessions before 7 October 2025 are not classified. Fake accounts, fake checkouts and polluted email lists are not covered by it.

Can you block the bots?

No. No one outside Shopify can block traffic to Shopify-hosted checkout. We reduce what bots cost you: in your email list, your abandoned-checkout emails, your customer list and your reports.

Will you delete customers?

No. We never delete. You decide. We tag and suppress only from the list you approve. Shopify blocks deleting a customer with orders, and deleting a customer profile can't be undone, so customers with orders are tagged, never deleted. Removing records stays your own decision.

How does suppressing junk profiles save money?

It depends on your email tool. Klaviyo: suppressed profiles do not count towards your billing plan. Mailchimp: unsubscribed contacts are still billed, so junk is archived, which stops it counting (archiving is not GDPR deletion). Shopify Messaging bills per email sent, with 10,000 free a month and then $1 per 1,000 (lower rates above 300,000), so the saving there is in sends, not contacts.

Do I need Shopify Flow?

Flow is a free app on the Basic, Grow, Advanced and Plus plans. The tagging and the abandoned-checkout guard use it.

What about card-testing orders?

Shopify says checkout attempts it identifies as card testing or bot activity don't create abandoned checkouts. This kit flags card-testing orders for review; holding risky orders before they ship is the Fraud Hold kit.