Skip to main content

Hi there, 

We’re looking for a double opt-in alternative to prevent our list from being spammed.

 

Recently we have been attacked by bots. I can see there are a lot of fake emails, but their domain is @gmail.com, so I can’t bulk delete them, segment them or do anything that’s not manual. I don’t understand how to prevent it from happening, because we have double opt-in activated.

Any suggestions in how to prevent them and how to delete them?

Shop is made in shopify

Thanks.

Hi @Taishah99,

Even with double opt-in, bots can sometimes get through. Here are a few ways to reduce spam in Shopify + Klaviyo:

Enable CAPTCHA/reCAPTCHA on your forms.

Use hidden honeypot fields to catch bots.

Segment and suppress suspicious emails in Klaviyo.

Consider bot-detection apps for Shopify forms.

Combining these should help prevent fake sign-ups and make cleanup easier.


Hey ​@Taishah99,

Have you managed to suppress these bot profiles? If not, I get it; it can be tricky, especially if they all come from common email domains like gmail.

When I encounter bots in customer accounts, I like to see if they all have certain features in common. Do they all have a + sign in their email address? Did they all take exactly the same action (like starting checkout with a certain item and doing nothing else), or are they all from the same location? If you find similarities between the bot profiles, you can create a segment using these characteristics that does a fairly good job capturing the bots.

Of course, it won’t be perfect, because bot profiles can sometimes try and appear like real profiles, leading to a small number of real profiles entering that segment, but I’d say that this would be a small risk to take for the sake of suppressing these bots. After you create a segment that isolates these profiles, you’d want to suppress that segment periodically, or create a flow with a webhook in it that suppresses profiles that enter that segment.