Skip to main content
Contributor I
December 25, 2023
Solved

HELP! Spam attack? More sign-ups than users...

  • December 25, 2023
  • 11 replies
  • 1218 views

We seem to be under some form of spam attack this month where we are seeing more sign ups than we have website visitors. 

The source seems to be shopify (we do not have a banner or a pop-up..in fact the subscription method is hidden away to an extent but still you can see a massive spike in December:


How can I stop this or a​​​​​​t least manage it?

Best answer by stephen.trumble

Hey @saltyswim 

So these profiles are likely being added because they are targeting your stores checkout. Every time a checkout started event happens Shopify sends Klaviyo the profile regardless of signup (making double opt-in irrelevant). Check out this Shopify article on how to protect your store from bots. 

11 replies

Contributor I
August 18, 2026

This usually isn’t Klaviyo inventing subscribers. If Shopify is connected, a checkout-started event can create a Klaviyo profile with no opt-in — double opt-in doesn’t apply to that path. Form stuffing is a separate issue; for that one it might help to use double opt-in.

For the junk already in the list, segment the empty/garbage profiles and bulk suppress them. To stop new ones, you have to catch the bots on Shopify. We use the Shopify app CartWatch for that — it flags bot checkouts and can auto-suppress those emails in Klaviyo so they don’t hit flows or inflate billing.