Articles on: [Shopify Platform] Blockify - Fraud IP Blocker

This article is also available in:

Add a new rule to block

Overview

Blockify offers a powerful feature that allows you to block access from specific IP addresses or locations effortlessly. With just a few clicks, you can define who can and cannot reach your website or online store.

Currently, Blockify supports blocking access using the following criteria:

IP Address (support IPv4 and IPv6).
IP Starts With.
IP Range.
Country.
State or Province.
Product, Collection
User Agent
Specific Page
Internet Service Provider (ISP).
Referrer exact URL
Custom URL
Referrer URL contains

The IP's information is checked using the Proxycheck.io database.

Instruction

Block IP Address

Step 1: Open the "Blocker & Re-director" tab.
Step 2: Select "Block" and click "Block IP Address"

Step 3: Selecting status as "Enable" means the rule will be active right after creation, while choosing "Disable" means the rule will not be active. (To set the rule status to Disable, click the Disable button.)

Step 4: Choose "IP address" as the "Select condition". If the "Select type" is "Manual", enter the IP addresses in the input field. If the "Select type" is "Upload CSV", click "Upload CSV" to import a file (a sample file can be downloaded via the hyperlink).

Block IP Start With

Step 1: Open the "Blocker & Re-director" tab.
Step 2: Select "Block" and click "Block IP Address"

Step 4: Choose "IP start with" as the "Select condition". If the "Select type" is "Manual", enter the "Ip start with" in the input field. If the "Select type" is "Upload CSV", click "Upload CSV" to import a file (a sample file can be downloaded via the hyperlink).

Block IP Range

Step 1: Open the "Blocker & Re-director" tab.
Step 2: Select "Block" and click "Block IP Address"

Step 4: Choose "IP Range" as the "Select condition".

If the "Select IP range type" is "CIDR":
- If the "Select type" is "Manual", enter the IP address in CIDR format in the input field.
- If the "Select type" is "Upload CSV", click "Upload CSV" to import a file (a sample file can be downloaded via the hyperlink).
If the "Select IP range type" is "Range", enter the "Start IP" and "End IP" in the input fields.

Note: CSV upload supports files up to 2MB and a maximum of 500 rows. Both limits must be satisfied.

Click "Save" to save the rule.

Block Country.

Step 1: Open the "Blocker & Re-director" tab.
Step 2: Select "Block" and click "Block location"

Step 4:
Block specific countries: Select individual countries or predefined regions to block visitors from those locations. Predefined regions include EU countries, Non EU countries, Non US countries, Africa countries, Non Africa countries, Non AUS countries

Choose "Select condition" is "Country" -> Block specific countries -> "Select country" and click "Save"

Block all countries except: Block all countries by default, then select the countries you want to allow access from. Only visitors from the selected countries will be able to access your store.
Predefined regions include:

EU countries
Non EU countries
Non US countries
Africa countries
Non Africa countries
Non AUS countries

Choose “Select condition” as “Country” → Block all except... → Select country → then click “Save”.

NOTE: The "Block All Except" feature is only available on paid plans.

Block State or Province.

Step 1: Open the "Blocker & Re-director" tab.
Step 2: Select "Block" and click "Block location"

Step 4:
Block specific provinces/states: Select individual provinces or states to block visitors from those locations.

Choose "Select condition" is "Province" and select "Select country" -> Block specific provinces/states -> select "Select state/province" -> select "Select city (optional)" and click "Save" (Selecting two or more 'State/Province' options disables the 'City' selection)

Block all provinces/states except: Block all provinces/states within a selected country by default, then select the provinces/states you want to allow through. Only visitors from your selected provinces/states will be able to access your store. All other visitors from that country will be blocked. Example: If you select Vietnam as the country and Hanoi as the allowed state, only visitors from Hanoi can access your store. All other visitors from Vietnam will be blocked.

Choose "Select condition" is "Province" and select "Select country" -> Block all except... -> select "Select state/province" -> select "Select city (optional)" and click "Save" (Selecting two or more 'State/Province' options disables the 'City' selection)

NOTE: The "Block All Except" feature is only available on paid plans.

Block Product.

Step 1: Open the "Blocker & Re-director" tab.
Step 2: Select "Block" and click "Block products"

Step 4: Choose "Select condition" is "Specific products" and select "Select product" -> select "Select country" -> select "Province" (optional)and click "Save"

Block Collection.

Step 1: Open the "Blocker & Re-director" tab.
Step 2: Select "Block" and click "Block products"

Step 4: Choose "Select condition" is "Specific collection" and select "Select product" -> select "Select country" -> select "Province (optional)"and click "Save"

Block Browser.

Step 1: Open the "Blocker & Re-director" tab.
Step 2: Select "Block" and click "Block user agent"

Step 4: Select "Country"-> choose "Type" is "Browser" and select "Select browsers" -> select "Select device" -> Select "Select OS" and click "Save"

Block Substring

Step 1: Open the "Blocker & Re-director" tab.
Step 2: Select "Block" and click "Block user agent"

Step 4: Select "Country"-> choose "Type" is "Substring" -> enter into the input field "Substring" -> click "Save"

Block regex

Step 1: Open the "Blocker & Re-director" tab.
Step 2: Select "Block" and click "Block user agent"

Step 3: Selecting status as "Enable" means the rule will be active right after creation, while choosing "Disable" means the rule will not be active. (To set the rule status to Disable, click the Disable button.)
Step 4: Select "Country" -> choose "Type" is "Regex" -> enter your pattern in the "Regex pattern" input field -> click "Save"

Note about Regex pattern:

Regex matching is case-sensitive by default. Add (?i) at the beginning of your pattern to ignore letter case.
Patterns are limited to 255 characters.

Generate a pattern with AI

If you are not comfortable writing a regular expression, you do not have to. Click the purple Generate with AI icon next to the "Regex pattern" field and describe the traffic you want to block in your own words — English and Vietnamese are both supported.

Step 1: In a Block user agent rule, set "Type" to "Regex".
Step 2: Click the Generate with AI icon next to the "Regex pattern" field.
Step 3: Describe the bots, browsers, or traffic you want to block. Be specific — "block AI crawlers like GPTBot and ClaudeBot" gives a much better result than "block bad bots".
Step 4: Blockify shows the Generated rule together with a What this rule does explanation in plain English.
Step 5: Paste a real User-Agent string into Test your rule to check whether it comes back Blocked or Not blocked before you commit.
Step 6: Click Apply to place the pattern into the "Regex pattern" field, or Copy to copy it to your clipboard. If the result is not what you wanted, click Regenerate.
Step 7: Click "Save" to activate the rule.

Broad-pattern warning: If the generated pattern is wide enough to also match real browsers — for example a pattern produced from "block visitors on mobile" — a yellow warning appears next to the result, and the browser rows under the sample user agents are badged Blocked. Blockify does not stop you from saving such a rule, but confirm that is really what you want: a pattern like this blocks genuine customers, not just bots. The same warning appears if you type a broad pattern by hand.

Limits:

Available on paid plans only.
10 AI generations per store per day. Regenerate uses one generation. Failed requests (timeouts or service errors) do not count.
Descriptions are limited to 500 characters, and generation waits up to 10 seconds.

If generation fails: Blockify never shows you an invalid pattern — every generated pattern is validated on the server first and retried if it does not pass. If no valid pattern can be produced, you will see an error explaining what to do next, and your rule form keeps everything you already entered. You can always type the pattern by hand instead; the manual flow is unchanged.

Block Specific Page.

Step 1: Open the "Blocker & Re-director" tab.
Step 2: Select "Block" and click "Block specific page"

Step 4: Select condition is "Select pages"-> Select page ->select "Select country" -> click "Save"

Block Internet Service Provider (ISP).

Step 1: Open the "Blocker & Re-director" tab.
Step 2: Select "Block" and click "Block ISP"

Step 4: Select "Select country"-> select "Select ISP" -> click "Save"

Block Referrer exact URL.

Step 1: Open the "Blocker & Re-director" tab.
Step 2: Select "Block" and click "Block referrer URL"

Step 4: Choose country -> choose "Exact URL" as the "Referrer URL Matching" -> enter the complete website address, including https:// -> enter the Ref URL name (optional)

Block Custom URL

Step 1: Open the "Blocker & Re-director" tab.
Step 2: Select "Block" and click "Block specific page"

Step 4: Select condition is "Custom URL"-> Enter a valid URL ->select "Select country" -> click "Save"

Block Referrer URL contains

Step 1: Open the "Blocker & Re-director" tab.
Step 2: Select "Block" and click "Block referrer URL"

Step 4: Choose country -> choose "URL Contains" as the "Referrer URL Matching" -> enter part of the website address you want to match. -> enter the Ref URL name (optional)

Notes for all block rules
You can add a private note when creating a rule to record the reason for blocking. This note is only visible to you or your team and will not be shown to customers. (This note is a recent update and is displayed at the end of each rule.)

After the rule is created, the note will appear in the rule list table for easy tracking.

Rules Blockify adds for you

Some rules are not created by you at all — Blockify's auto-block features add them when they detect a risky visitor. These rules are marked so you can tell them apart from the ones you added yourself:

They show an Auto label in the rule list, visible without opening the rule.
They carry a fixed note naming the feature that created them: Added automatically by Auto-block visitors placing fraud orders for the fraud-order feature, and Added automatically by Auto-block IP from high-risk orders at checkout for the checkout feature.

You can filter the rule list by either note to pull up every rule from that source at once — useful when your list has grown to hundreds or thousands of rules and you want to know how many came from the app.

What you can still do. These are ordinary rules: you can edit the note, clear it, or delete the rule. The Auto label does not depend on the note text, so changing or deleting the note does not remove the label.

What Blockify will not do.

It never overwrites a note you wrote yourself. If you had already added an IP by hand and auto-block later matches the same IP, your note is kept as-is.
The note never changes. Blocking the same IP again does not append to it or rewrite it.
The note names the source only — not the specific order. Per-order detail lives in the fraud order analytics, not in the note.
Rules created before this update are not relabelled. They have no automatic note and appear as manual rules.

Note: After clicking the 'Save' button, the rule will be created and stored in the blacklist. Here, you can view, edit, delete, disable, or enable the rule.

Updated on: 19/08/2026

Was this article helpful?

Thank you!