Articles on: [Shopify Platform] Blockify - Fraud IP Blocker

Blockify - Fraud IP Blocker FAQs

Overview

Here are the questions store owners ask us most about Blockify - Fraud IP Blocker, from first setup to billing. They are grouped in the same order as the menu in the app. Each answer links to the full guide when there is one.

General & setup

Q. How do I keep bots, content copiers and fake orders away from my store?

Blockify protects your store in layers. Each layer has its own place in the app:

Block & Re-director: block visitors, or send them to another page, by IP address, country, state/city, internet provider, browser and device, the website they came from, or the page they open.
Settings > Risk Mitigator and Settings > Bot Mitigator: block visitors who hide behind a VPN, a proxy or the Tor browser, plus spam bots and spy browser extensions.
Block Checkout: stop risky customers at checkout by email, phone, name, address or customer tag.
Fraud Filters: give every order a risk score, then cancel or flag the risky ones.

To get going, follow Set up Blockify for your first use case. It covers the most common situations step by step.

Q. How do I know Blockify is set up correctly?

Check that two things are on. You'll find both on Home:

Blockify app status (Activate Blockify)
Enable app embed on theme (the Blockify app embed in your theme)

Activate Blockify and the app embed shows both steps and how to check that the app is running on your store. You can also ask our support team to review your setup at any time.

Q. Blockify shows "Contact us to use Blockify for developement store". What does that mean?

Your store is on a Shopify development, partner test, Plus partner sandbox, affiliate or developer preview plan, and Blockify is on the Free plan. In that case every page of the app shows this message instead.

Click Contact us to open the chat. Agencies, store builders and merchants who need Blockify on this kind of store can ask our support team for a free upgrade to our highest plan. The app opens normally once the store is upgraded, or once it moves to a paid Shopify plan.

Q. Do I need to delete anything from my theme after I uninstall Blockify?

No. Blockify doesn't add code to your theme, so nothing is left behind. The only exception: if you pasted a Blockify snippet into your theme yourself, remove it.

Q. Why does Blockify sometimes show the wrong location for a visitor?

Because no one can match an IP address to an exact place 100% of the time. Internet providers hand out addresses that change, the public records behind them are not always checked, and city names in particular are often guessed. The location is reliable enough to block a country or region, but it can't pinpoint a visitor down to a few metres. If you need to be precise, block by country or state rather than by city.

Q. What is an ISP?

An ISP (internet provider) is the company that connects a visitor to the internet, such as a phone company or a hosting company. Blockify shows each visitor's internet provider in the visitor log, and you can block or redirect visitors by it. This helps against hosting companies, which real shoppers rarely use. See Block or redirect by ISP.

Q. Can Blockify stop fake customer accounts and spam sign-ups?

It cuts most of them, but no app can stop them all. Blockify helps in three ways:

Auto-block spam bots in Settings > Bot Mitigator
The Block checkout from disposable or temporary email addresses switch (see Block disposable email addresses)
Your own rules that block bots by browser and device information

The visitor log helps you find out where the sign-ups come from.

Q. Will Blockify block draft orders that my custom app creates?

No. Block and redirect rules only apply to visitors on your online store. They don't touch draft orders created in the Shopify admin or by another app.

Q. My theme or thumbnails don't show in the Shopify admin, and Shopify says Blockify is the cause. What should I do?

Contact our support team through the in-app chat. We look into these cases ourselves and fix them without asking you to uninstall the app.

Block & Redirect rules

Q. What's the difference between the Blacklist and the Whitelist?

Blacklist rules (Block and Redirect) stop the visitors they match, or send them somewhere else. Whitelist rules always let their visitors in, and Blockify checks them before any block rule. So an IP address on your Whitelist gets in even if its country is blocked.

Example: you block Australia, then add one Australian IP address to the Whitelist. Only that address can enter. Everyone else from Australia is blocked.

One exception: a whitelisted visitor who uses a VPN or proxy is still blocked by the Proxy and VPN blocker, unless you tick Whitelist if these accesses use VPN. on the rule. See A complete guide: Block & Redirect rules.

Q. What happens if I block and redirect the same IP address or country?

The rule you added first wins. For example, you block country A, then later add a rule that sends country A to Google. Visitors from country A are blocked. If you want the redirect to work, delete or turn off the older rule.

Q. How many rules can I create?

It depends on your plan. Free allows 2 active rules and Premium allows 50. Enterprise and Shopify Plus have unlimited rules. If you move to a smaller plan, Blockify turns off the active rules above the new limit, and you choose which ones to turn back on. See A complete guide: Plans and billing.

Q. I blocked my own country. How do I get into my store?

Use the Admin's access URL in Settings > General settings. Better still, add your own IP address to the Whitelist tab before you block your country. See How can I access my store if I have blocked my own country?.

Q. Can I let in only shoppers who come from the Facebook and Instagram apps in certain countries?

Yes. First create a Block rule for those countries (or use Block all except). Then add a Whitelist rule by user agent that matches the Facebook and Instagram apps on Android and iOS. Whitelist rules are checked first, so only shoppers browsing inside those apps get in. Our support team can help you write the text pattern for that rule. See Block or redirect by user agent.

Q. Why can't I see the Generate with AI button?

Generate with AI only shows on user agent rules where Type is set to Regex (a text pattern). You'll find it in Block, Redirect and Whitelist rules. It doesn't show for the Browser or Substring types, or for rules that block by something else, such as IP address, Specific page, ISP or Referrer URL. See Generate regex patterns with AI.

Q. Can I describe what I want to block in Vietnamese?

Yes. You can write in Vietnamese or English, with or without accents. Blockify may reply in English. That's normal, and the reply always explains the pattern it actually created.

Q. How many times a day can I use Generate with AI?

10 times per store per day. Each click on Regenerate counts as one. A request that fails because it timed out or because of a service error doesn't count. When you reach the limit, Blockify tells you when it resets. Until then, you can still write patterns yourself.

Q. Why do some rules in my Block list have an "Auto" label?

Blockify created those rules for you. The auto-block features add them when they spot a risky visitor. Each one carries a fixed note that names the feature that created it. You can edit the note or delete the rule as usual, and the label stays either way. To see every rule the auto-block features created, use the Source filter on the rule list.

VPN, Proxy & Bot protection

Q. How does the Proxy and VPN blocker work?

When Proxy and VPN blocker is on, Blockify looks up every visitor's IP address in the proxycheck.io database. That gives a risk score from 0 to 100: how likely it is that the visitor is hiding behind a VPN or proxy. Blockify groups the scores into Risk level 1 (0–66), Risk level 2 (67–73) and Risk level 3 (74–100), and you choose the level from which visitors are blocked. Blocked visitors show in the visitor log with VPN/proxy as the block reason. See Configure Proxy and VPN blocker.

Q. Which risk level should I block from?

Most stores start by blocking scores of 74 and above (Risk level 3). This stops known VPNs, proxies and servers posing as real shoppers, and rarely blocks real customers. If risky visitors still get through, lower it to 67. If real customers complain, raise it.

Q. Why is Blockify blocking visitors from countries I didn't block?

First check whether Proxy and VPN blocker is on. If it is, those visitors are using a VPN or proxy that makes them look like they're somewhere else. Blockify blocks them for using a VPN, not for their country, and the visitor log shows that reason. If the feature is off and visitors are still blocked when they shouldn't be, contact our support team and we'll go through your rules with you.

Q. Why am I blocked on Safari when I switch to 4G/5G, even though my IP address isn't blocked?

On mobile data, Safari can send your connection through Apple's iCloud Private Relay, which works like a VPN. If Proxy and VPN blocker is on, that connection is blocked. To let it through, turn on the iCloud Private Relay option in the Proxy and VPN blocker settings. This option only works for Safari.

Q. How do I block visitors who use the Tor browser?

Turn on Tor blocker in Settings > Risk Mitigator. It blocks every visitor using the Tor browser, which people use to hide who and where they are. Available on the Enterprise plan and above. See Configure TOR blocker.

Q. How do I allow or block specific bots, like Googlebot, the TikTok bot or AI bots that read websites?

Go to Settings > Bot Mitigator and click Manage Allowed Bots to see the Allowed bot list. Bots on that list are always let in. To add a bot that isn't listed, send us a request and our team will review it. To block a bot that Auto-block spam bots doesn't catch, create a Block rule by user agent. See Manage the Allowed bot list.

Q. Will Blockify block Google, Bing or Facebook bots? Could I lose search or ad traffic?

No. Trusted bots from search engines, social networks and ad platforms are on the Allowed bot list. Blockify lets them in before checking any block rule, so they are never blocked and don't show in your visitor log. Auto-block spam bots and your own rules only apply to bots that aren't on the list.

Checkout protection

Q. Can Blockify block bots or visitors right on the checkout page?

Yes, with the checkout features. Your block and redirect rules only protect your online store, not Shopify's checkout page. For the checkout itself, use:

Block Checkout (Enterprise plan and above) to block orders by email, phone, name, address, zip code or customer tag.
Block checkout access (Shopify Plus only) to block the checkout by IP address, country or VPN, through Blockify's checkout blocks.

See A complete guide: Block Checkout.

Q. Can I stop one customer from ordering but still let them browse my store?

Yes. Create a Block Checkout rule with that customer's email or phone number. They can still look around, but they can't finish checkout. Available on the Enterprise plan and above. See Block checkout by email, phone, name, address or customer tag.

Q. Can I block certain zip codes?

At checkout, yes: add a Block Checkout rule by zip code (Enterprise plan and above). You can't block people from visiting your store by zip code, but you can block by state, province or city instead. See Block or redirect by state, province or city.

Q. Can I block customers based on how much they order?

Partly. In the Block Checkout settings, turn on Auto-block creating orders with a subtotal of 0 and matching last name with first name. It stops the common trick of placing free orders. For other rules based on order amount, use our companion app Blockify Checkout Rules. See Auto-block checkout with free products.

Q. Can I stop bots from testing stolen cards on my checkout?

Yes, with the checkout protections:

Stop repeated checkout attempts limits how many times the same visitor can start a checkout.
Auto-block IP from high-risk orders at checkout (Shopify Plus) adds the IP addresses behind risky attempts to your block list.
Stop bots from creating fake checkouts (early access, turned on by our team) blocks checkouts that didn't come through your online store.

See Stop repeated checkout attempts, Stop bots from creating fake checkouts and Auto-block IP from high-risk orders at checkout (Shopify Plus).

Fraud Filters

Q. What happens to an order after Fraud Filters checks it?

Each order gets a risk score: low, medium or high. For high-risk and medium-risk orders, you choose what happens: Cancel order automatically, or Flag order with a tag. If you also turn on Auto-block visitors placing fraud orders (Enterprise plan), the IP address behind a fraud order goes on your Block list with the "Auto" label. See Configure risk-based actions for fraud orders and Auto-block visitors placing fraud orders.

Q. A real order was cancelled. How do I stop that from happening?

If that risk level is set to Cancel order automatically, Blockify cancels the order as soon as it gets its score, and can't undo it. To avoid this next time, either switch that level to Flag order so you check orders yourself, or raise the score at which an order counts as fraud (Fraud order score starts at). See A complete guide: Fraud Filters.

Q. What does "Order from VPN/Proxy" on an order mean?

It tells you whether the customer was using a VPN or proxy when they placed the order. It's one of the things that make up the order's risk score. See Understanding the "Order from VPN/Proxy" field for the two things this field can show.

Visitor Analytics & Shopify reports

Q. Why does Shopify Analytics still show "sessions" from a country I blocked?

Because Shopify counts the visit before Blockify stops it. Think of Shopify Analytics as the doorman of a building, and Blockify as the security guard in the lobby:

A visitor from a blocked country opens your store.
Shopify Analytics counts one session the moment they arrive, before any app runs.
Blockify then checks the visitor, sees they're not allowed, and stops them before they reach any page, product or checkout.

Both are right: Shopify noted that someone arrived, and Blockify stopped them. Google Analytics and other analytics apps count these attempts the same way.

Q. So is Blockify actually working?

Yes. A blocked visitor can't see your products or other protected pages, add anything to the cart, open the checkout or place an order. The session in Shopify Analytics is just a harmless record of a visit that went nowhere.

Q. How can I see that Blockify is working?

Look at Analytics inside Blockify, not Shopify Analytics. The visitor log lists every blocked visit with its time, country, IP address and block reason. The overview shows totals by day, week or month. See Visitor logs: allowed, blocked, redirected and bot visitors.

Q. How do I get a "clean" traffic report without the blocked visits?

You have two options:

Simplest: use Blockify Analytics to see who was blocked, and read Shopify Analytics as your total traffic, blocked visits included.
Advanced: in Google Analytics, add a filter that leaves out the countries you block. Blockify can't do this for you inside Google Analytics, but the filter gives you clean numbers to work with.

This is how every Shopify app works: no app can stop Shopify from counting a visit.

Q. Why can't I see all IP addresses in Visitor Analytics, or why isn't it updating?

On the Free plan, the visitor log only records your first 200 unique visitors, and analytics shows the last 7 days. This only limits what you see; blocking keeps working. On a paid plan, first check that the app embed is on (see Activate Blockify and the app embed). If the log still doesn't update, contact our support team.

Q. How long does Blockify keep visitor data?

2 months. On a paid plan, you can keep it longer (6 months to 2 years) with the Extended data retention add-on. To keep a copy before older data is removed, see How to export visitor data?. You can download just a date range or a block reason if you only need part of it.

Q. Why is "Total Blocked Visitors" different from "Total blocked VPN & Proxy"?

Total Blocked Visitors counts every unique visitor that was blocked, for any reason: country, IP address, browser and device, bot, VPN/proxy and so on. Total blocked VPN & Proxy only counts visitors blocked by the Proxy and VPN blocker, so it's always the smaller number.

Q. How do I see how many visitors one rule has blocked?

Open the visitor log in Analytics, filter by Block reason and pick the dates you want. Blockify doesn't show a count on each rule, so the filtered log is the way to see it.

Blocking page & Content protection

Q. How do I remove the Blockify brandmark from the blocking page?

Go to Settings > Blocking template, edit your template and click Click to remove brandmark to ask the Blockify team to remove it. The brandmark only shows on the Free plan. See A complete guide: Customize your blocking page.

Q. Content protection gets in the way of my SEO consultant or designer. What can I do?

Protect content stops visitors from selecting or dragging your text and images. Deactivate right click and Deactivate inspect turn off the browser tools that SEO and design work needs. You have two options:

Set Apply content protection to non-whitelisted visitors only, and add your consultant's IP address to the Whitelist.
Or turn off those two options while they work.

See Configure Content protection.

Q. Can I change the text, colours and logo on the blocking page?

Yes. In Settings > Blocking template you can pick a template and change its title, text, background, logo and loading effect. Higher plans can also add their own Custom CSS and HTML. See A complete guide: Customize your blocking page and Customize your blocking page with HTML.

Integrations

Q. Does Blockify work with Shopify Flow?

Yes. Blockify adds its own events (what starts a workflow) and actions to Shopify Flow. For example, you can block an IP address when an order is flagged, or tag a customer when their checkout is blocked. Available on the Enterprise and Shopify Plus plans. See Integration with Shopify Flow x Blockify.

Q. Does Blockify work with Klaviyo?

Yes. In Integrations, connect Klaviyo with your Klaviyo Private API key. Then choose which visitor or order conditions are copied to Klaviyo profiles, and which tags those profiles get. See Integration with Klaviyo x Blockify.

Q. Can Blockify connect to Google Analytics or filter it?

No. Blockify can't filter your Google Analytics (GA4) data, and blocked visit attempts still show there. Use Blockify Analytics to see who was blocked, and add a country filter in Google Analytics if you need a clean report. See How do I get a "clean" traffic report without the blocked visits? above.

Plans & billing

Q. Is there a free plan, and what's in it?

Yes. The Free plan is free forever and needs no credit card. It includes:

Block, Redirect and Whitelist rules by IP address and country
Standard fraud order analytics
Live chat support

Limits: 2 active rules, and visitor logs for your first 200 unique visitors. The 200 visitors don't reset. This only limits what you see in the log; blocking keeps working after you reach it. See A complete guide: Plans and billing.

Q. Which plan do I need for each feature?

Premium ($9.99/month): 50 active rules, 10,000 tracked visitors a month, Proxy and VPN blocker, rules by state, city, URL and collection, fraud IP detection on orders, copy-paste protection.
Enterprise ($29.99/month): everything in Premium, plus unlimited rules, 25,000 tracked visitors a month, rules by ISP, referrer and IP range, Fraud Filters auto-block and auto-cancel, Block Checkout, Tor blocking, right-click protection and full analytics.
Shopify Plus ($59.99/month): everything in Enterprise, plus 50,000 tracked visitors a month, a dedicated success manager, a custom service agreement (SLA) and hands-on help with your first setup.

For the full list, open Pricing and click Compare plans. See A complete guide: Plans and billing.

Q. Can I try a paid plan for free?

Yes. Paid plans start with a 3-day free trial. You pay nothing until it ends, and you can cancel during the trial at no cost. After the trial, the plan price is added to your Shopify bill.

Q. What happens when my paid plan runs out of visitors?

Your rules keep blocking either way; only Analytics is affected. On a monthly plan, Blockify adds extra visitors in steps and adds them to your next Shopify bill, up to 3 steps per billing period. After that, you can approve a new charge or move to Unlimited visitor tracking. A yearly plan uses the amount you chose when you bought it, with no extra charges.

Q. How do I pay for Blockify?

Through your Shopify bill, monthly or yearly, depending on what you choose. Paying yearly saves 15% compared with paying monthly.

Q. Can I use a discount code on a yearly plan?

Yes, if the code covers yearly plans. If the usual 15% yearly saving is better than the code, Blockify gives you the yearly saving instead. Only one discount applies at a time.

Q. Can I go back to the Free plan while I'm not using the app?

Yes. Open Pricing and choose Free. The change happens right away: paid protections such as VPN blocking and Fraud Filters actions turn off, and active rules above the 2-rule limit are turned off. You can turn rules back on yourself, up to that limit.

Q. Can I move my plan to another store or change the account owner?

No, plans can't be moved between stores. Contact our support team, then install Blockify on the new store and choose a plan there.

Updated on: 16/10/2026

Was this article helpful?

Thank you!