About Blockify - Fraud IP Blocker
Overview
Blockify - Fraud IP Blocker is a Shopify app that decides who can reach your storefront, who can reach your checkout, and what happens to an order that looks fraudulent. You set the rules in the Blockify admin; Blockify applies them to every visit and checkout on your store. This article explains the four protection layers, where each feature lives in the admin, and what each plan includes.
What you'll learn
- What Blockify protects
- Where each feature lives in the admin
- Plans at a glance
- Who can use this feature?
What Blockify protects
Blockify works in four layers. A visitor passes through them in this order, and you can use one layer or all of them.
Layer 1: Storefront rules
Rules in Block & Re-director decide whether a visitor can open your store, sees your blocking page or is sent to another page, before your store appears. A rule can look at the visitor's IP address, IP range, country, state or province, city, internet provider (ISP), browser and device (user agent) or the website they came from (referrer URL), and it can cover the whole store or only to selected products, collections or pages.
- Blacklist holds your Block and Redirect rules. A blocked visitor sees your blocking page; a redirected visitor is sent to the URL or Shopify market you chose.
- Whitelist holds exceptions. Whitelist rules are checked before block rules, so a whitelisted visitor is never blocked by a rule in the same list.
Known good bots (search engines such as Google, social media link previews, SEO tools) are always let in before Blockify checks your block rules. You manage that list in Settings > Bot Mitigator > Allowed bot list.
Layer 2: VPN, proxy and bot protection
Two Settings sections hold the automatic protections that do not need a rule.
Settings > Risk Mitigator (visitors hiding who they are):
- Proxy and VPN blocker blocks visitors who use a proxy or VPN when Blockify rates their connection at or above the risk level you set.
- Tor blocker blocks visitors who use the Tor browser, which hides who and where a visitor is.
- Block disposable email addresses on subscribe forms stops throw-away emails on your newsletter form.
Settings > Bot Mitigator (automated traffic):
- Auto-block spam bots stops bots that try to sign up or complete fake checkouts.
- Spy extensions blocker blocks visitors who browse with add-ons made to spy on and copy online stores.
- Allowed bot list keeps trusted bots, such as Google's, able to visit your store.
Layer 3: Checkout protection
Block Checkout rules stop a checkout from completing when the shopper's email, phone number, name, address, zip code or country matches your conditions, or when the visit comes from a blocked IP, country or VPN. The shopper sees the error message you write. Fraud Filters also holds two checkout protections: Stop repeated checkout attempts and Stop bots from creating fake checkouts.
Layer 4: Order screening
Fraud Filters scores every new order as low, medium or high risk and shows the reasons. For each risk tier you choose what Blockify does: Cancel order automatically or Flag order with a tag, so your team reviews it in Shopify. Flagged and cancelled orders are listed in Fraud Filters and can be exported.
Around these layers, Analytics records every allowed, blocked, redirected and bot visit with the block reason, and Settings > Blocking template and Settings > Content protection control what a blocked visitor sees and whether visitors can copy, right-click or inspect your store.
Where each feature lives in the admin
Feature | Where to find it | What you can do there |
|---|---|---|
Set-up status, app embed, quota, overview | Home | Turn Blockify on or off, turn the app embed on, follow the Recommended set up panel, search settings. See A complete guide: Home page |
Visitor log, overview metrics, top pages | Analytics | Filter visits by status, country, block reason and date; export visitor data |
Block and redirect rules | Block & Re-director > Blacklist | Add rules by IP, location, internet provider, browser or device, the website visitors came from, product or page |
Exceptions | Block & Re-director > Whitelist | Allow specific IPs, countries or visitors that use VPN |
Order risk and actions | Fraud Filters | See scored orders, choose cancel or flag per risk tier, stop repeated checkout attempts and fake checkouts |
Checkout blocking | Block Checkout | Block checkouts by customer details, IP, country or VPN; write the error message |
Admin language, notifications, access URL | Settings > General settings | Change the admin language, set fraud email reports, copy your admin's access URL |
Blocking page | Settings > Blocking template | Pick a template, add a logo, text and colours, or paste your own HTML |
VPN, Tor, disposable emails | Settings > Risk Mitigator | Turn each protection on or off, set the VPN risk level |
Spam bots, spy extensions, allowed bots | Settings > Bot Mitigator | Turn each protection on or off, manage the allowed bot list |
Copy, right-click, inspect | Settings > Content protection | Choose which browser actions are disabled on your storefront |
Shopify Flow, Klaviyo | Integrations | Send blocked visitors and fraud orders to other tools |
Plan and billing | Pricing | Compare plans, start a trial, add add-ons, apply a discount code, upgrade or downgrade. See A complete guide: Plans and billing |
Plans at a glance
Blockify has four plans. Each plan includes everything in the plan before it.
Plan | What it adds |
|---|---|
Free | Block, redirect and whitelist rules by IP and country, standard fraud order analytics, visitor analytics for the last 7 days, the default blocking template. Limits: 2 active rules and visitor logs for your first 200 unique visitors. |
Premium | 50 active rules and 10,000 tracked visitors a month, Proxy and VPN blocker, rules by state, city, URL and collection, fraud IP detection on orders, copy-paste protection |
Enterprise | Unlimited rules and 25,000 tracked visitors a month, Fraud Filters with automatic cancel or flag, Tor blocker, rules by ISP, referrer URL and IP range, Block Checkout, Deactivate right click and inspect, full visitor analytics |
Shopify Plus | 50,000 tracked visitors a month and all Enterprise features, plus a dedicated success manager, custom SLA, setup help from the Blockify team and priority engineering support. Available to Shopify Plus stores only |
Who can use this feature?
Available on all plans. Each feature article states the plan it needs.
FAQs
- Does Blockify block visitors before or after the page loads?
Storefront rules apply when the visitor opens a page, so a blocked visitor sees the blocking page instead of your store. Checkout rules apply when the shopper tries to complete the checkout. Fraud Filters check the order after it is placed.
- What happens to a visitor who matches both a whitelist rule and a block rule?
The whitelist rule wins. Blockify checks whitelist rules first, and known good bots are always let in.
- Can I see how many visitors a rule has blocked?
There is no counter on the rule itself. Open Analytics, filter the visitor log by Block reason and the date range you want, and the list shows every visit that rule stopped.
- Will Blockify cancel or refund orders on its own?
Only if you choose Cancel order automatically for a risk tier in Fraud Filters. With Flag order, Blockify tags the order and leaves the decision to you.
- Do I need the app embed for every feature?
Yes for everything that works on your storefront: rules, VPN and bot protection, content protection and visitor analytics. See Activate Blockify and the app embed.
Updated on: 16/10/2026
Thank you!