Scammers Exploit Shopify’s Own Notification System in New ‘Fake Refund’ Scam

Summary

A new phishing campaign is leveraging Shopify's own Shop app to send fake order and refund notifications directly to users' phones. Attackers create or compromise Shopify seller accounts to generate these fraudulent messages, evolving the traditional "fake refund" scam into a more direct and potentially convincing attack vector.

Entities