Blockify IP Fraud FAQs
I. General App Functionality & Setup
- How do I block unwanted traffic like bots, scrapers, and fraudulent orders?You can block specific IP addresses involved in fraudulent orders by adding them to your Block rule within the app.
- It is recommended to enable the "Fraud filter" and "Auto-block visitors placing fraud order" features. This will automatically cancel high-risk orders and add associated IP addresses to the block list, which helps to reduce chargebacks and protect your revenue
- The app allows you to prevent visitors from reaching certain pages, such as the checkout page.
- You can block specific cities (e.g., New Jersey) without blocking the entire country by creating specific blocking rules for those locations. However, be aware that blocking by city might not always be accurate due to dynamic IP assignments by ISPs, so the primary identifier to block is provinces.
- For traffic coming from Cloudflare that is likely from bots or scrapers, you should target traffic marked as: VPN/Proxy = Yes, Risk Score = 66 or higher, and Session Duration = under 1 minute. Only users with a risk score higher than 66 will be blocked
- If you have issues with bot spam from email sign-ups with suspicious patterns (e.g., "all email gmails and first name last name and 4 numbers"), the app can be configured to block these patterns from processing checkout. For general spam emails, it's advised to consult Shopify support or consider a dedicated email filtering service
- The "Auto-block spam bots" feature (currently in beta) is designed to detect and block automated sign-ups and fake checkouts.
- Can the app block bots directly on the checkout page?
- No, the IP Blocker & Country Redirect app cannot block bots directly on the checkout page due to Shopify policy. This limitation applies to all third-party apps on Shopify
- Workaround: As an additional safeguard, you may consider requiring users to log in to complete checkout. This strategy has proven helpful for other merchants facing similar issues
- What are the recommended risk score settings for blocking?
- The default risk score for blocking IP addresses using VPN/Proxy is 66.
- According to the proxycheck's database utilized by the app, risk scores are categorized as follows:
- Scores below 33 can be considered low-risk
- Scores between 34 and 66 can be considered high-risk.
- Addresses with scores above 66 are considered very dangerous.
A risk score of 66 is considered very dangerous, as it indicates high-risk IP addresses using VPN/Proxy connections. The app's core logic grants access if a VPN has a score lower than 66, and flags it as high risk and blocks it if the score is above 66.
- How can I allow or block specific types of bots (e.g., major AI bots, Googlebot, TikTok bot)?
- You can request assistance to create specific rules for blocking or allowing different bot types
- The app has a list of common bots that are allowed because they are not considered harmful and help with SEO, such as Googlebot, Bingbot, and Applebot.
- Requests for allowing new bots, including specific AI bots like ChatGPT, Perplexity AI, Amazonbot, Cohere AI, You.com AI, DuckDuckGo AI, and Neeva AI, can be forwarded to the product team for review and potential addition to the allowed list. For example, validator.schema.org (Google’s Structured Data Testing Tool) is specifically added to the allowed bot list.
- You can also block specific user-agent substrings commonly used by scrapers and automated tools, which are considered safe to block as they do not impact real customers. These include: HeadlessChrome, Puppeteer, PhantomJS, curl/, Wget/, python-requests, Scrapy, node-fetch, Go-http-client, axios, selenium, Java/, libwww, HttpClient, fetch/, CFNetwork, insomnia, Thunder Client, python, PostmanRuntime, RestSharp, reqwest, httpx, khttp, mechanize, Java-Client, Python-urllib, WinHttp, URLResolver, and okhttp. When blocking broadly for "bot" user-agents, it is important to use safeguards like filtering by country or whitelisting legitimate search engines like Googlebot.
- Blocking all bots is not possible as it risks blocking beneficial bots that help with SEO or prevent ads from being rejected on some platforms. The app detects bots based on user-agent, browser, OS, device, and bot name.
- How do I block TOR connections?
The Blockify app offers a TOR blocking feature that prevents all TOR connections to your website. To utilize this feature, you would need to upgrade to the Enterprise plan
- Can I prevent bots from obtaining credit card information when they attempt fraudulent checkouts?
This is a known challenge, and the support team investigates such cases to explore potential solutions.
- Can I block a single specific customer from placing orders without preventing them from viewing my store?
The app allows you to block individual customers by adding their IP address to your Block rule, which is the standard method for preventing fraudulent orders from specific individuals.
- Can I limit website access to only specific in-app browsers (e.g., Facebook, Instagram) on mobile devices from certain countries?
Yes, the app can support this. The team can help you create a rule by blocking all countries and then creating a whitelist rule specifically for the user-agents of Meta in-app browsers on Android and iOS. This will ensure that only users accessing your site from the Facebook/Instagram apps can view it. If other browsers still manage to access the site, it requires double-checking.
- Can I block customers based on their order value or cart total?
Yes, you can set up rules to block orders based on the cart total. For example, you can configure the app to block orders that are greater than a specified value (e.g., 2000 dhs or 1000). The free plan allows you to activate one rule of any type.
- Can I block specific zip codes?
Currently, the app does not support blocking specific zip codes.
II. App Functionality & Setup
- How can I ensure my Blockify setup is configured correctly?
- You can initiate a request for a Blockify setup review at any time.
- A support agent will connect with you to assist and may request screenshots or a collaborator code to access your Shopify theme for a thorough check.
- Do I need to manually delete any files from my Shopify store after uninstalling the Blockify app?
No, you do not need to manually delete any files after uninstalling the app, as Blockify does not add any code to your theme.
- How do I remove the brandmark from the blocking page?
To remove the brandmark, simply reply to the support message you receive, and the team will be happy to assist you with this
- How does the "Fraud order analytics" feature work after analysis?
This feature automatically adds the IP addresses of orders identified as high-risk to a blacklist. This helps to reduce chargebacks and protect your revenue
- I'm having trouble seeing all IP addresses in the visitor analytics, or my analytics aren't updating.
- This issue can occur if the volume of visitors exceeds the system's processing capacity, leading to calculation errors. The team is actively working on improvements to resolve this
- Data in your Visitor Analytics can also be successfully recovered if lost.
- Currently, the app does not have a filter to only show bot IPs in visitor analytics, but this feature is being considered for future development based on user feedback.
- The app stores visitor data for up to 60 days. While general allowed visitor data is limited to this period, you can request exports of specific data like blocked VPN/Proxy information for particular months within this timeframe. The "Total Blocked Visitors" number is lower because it sums all unique blocked visitors, including risky traffic beyond just VPNs and proxies.
- The "Protect Content" feature seems to be disabling itself after some time, or interfering with SEO work.
- The "Protect Content" feature prevents customers from selecting or dragging images on your store
- If you have SEO consultants or others who need to access inspection elements or use right-click functions for on-page SEO, you will need to disable the right-click and protect inspecting elements settings in the Content Protection page to allow them smooth access.
- Can I prevent a cancelled order from being blocked by the app if it was a valid order?
The support team can investigate specific cases where valid orders were cancelled by the app but not refunded.
- Can I move my Blockify account to a different website or update the main account holder?
- Unfortunately, we can’t migrate the subscription to another website/ store. We can refund the unused days and you can install and charge on a new website.
- My Shopify theme or thumbnails are not visible in my admin, and Shopify identified the app as the issue.
This is an issue that the support team will investigate to find a resolution without requiring you to uninstall the app
- I have many cancelled orders and want to prevent them from reaching the purchase stage entirely.
While the app is effective for general bot issues, it's important to note that it cannot block visitors from reaching the purchase stage before the order is processed as "cancelled" due to Shopify policy. This is a limitation for all third-party apps on Shopify.
- Is there a limit to the number of rules I can set in the app?
- You can add an unlimited number of items to lists (e.g., IP addresses for whitelisting/blacklisting). However, the number of active rules you can create is limited by your pricing plan (e.g., some plans may allow only 6 country-related rules, including both block and whitelist rules).
- In general, keeping the total number of rules under 2,000 usually ensures everything runs smoothly.
- . Can I prevent the app from blocking draft orders created by my custom app?
If Blockify is blocking draft orders created by your custom app, you can seek assistance from the support team to set up rules to prevent this interference.
- Can the app integrate with or filter data for Google Analytics?
It is generally not possible to filter Google Analytics (GA4) directly within the app. You may need to draw conclusions about "real" users based on Blockify's reports separately.
- Why is "Total Blocked Visitors" different from "Total blocked VPN & Proxy" in my analytics?
The "Total Blocked Visitors" number is a sum of all unique blocked visitors, which may include other types of risky traffic beyond just VPNs and proxies. "Total blocked VPN & Proxy" specifically refers to visitors blocked due to VPN or proxy connections. You can request exports of the VPN/Proxy blocking data if needed
Updated on: 04/08/2025
Thank you!