> ## Knowledge Base Index
> Fetch the complete knowledge base index at: https://help.omegatheme.com/sitemap.xml
> Use this file to discover available pages before exploring further.
> Pure-Markdown content can be obtained by appending a '.md' suffix to the content URLs listed in the sitemap (without the trailing slash).

# Configure Proxy and VPN blocker

## Overview

Stop visitors who hide their real location from reaching your store. **Proxy and VPN blocker** blocks visitors who connect through a VPN, a proxy or a server instead of a real home or mobile connection. Blockify gives each visitor a risk score from 0 to 100 (how risky Blockify thinks their connection is), and you choose the score at which to block. Use it when fraud or fake traffic comes from hidden locations. You find it in **Settings > Risk Mitigator**.

## What you'll learn

* [How to enable Proxy and VPN blocker?](#2-how-to-enable-proxy-and-vpn-blocker)
* [How it works?](#2-how-it-works)
* [Who can use this feature?](#2-who-can-use-this-feature)

## How to enable Proxy and VPN blocker?

Step 1: Go to **Settings > Risk Mitigator** and turn on **Proxy and VPN blocker**.

![](https://storage.crisp.chat/users/helpdesk/website/-/8/3/8/3/8383e5404a31c000/settings-01-risk-mitigator-tab_18c4jlm.png)

![](https://storage.crisp.chat/users/helpdesk/website/-/8/3/8/3/8383e5404a31c000/20250908-103750_1rdxq1n.png)

Step 2: Set **Risk score starts at**: drag the slider to a value from 0 to 100, using the recommended thresholds as a guide. Visitors with this score or higher are blocked or redirected.

![](https://storage.crisp.chat/users/helpdesk/website/-/8/3/8/3/8383e5404a31c000/image_ciwcqv.png)

| Tip: Setting a low threshold may block legitimate customers using VPN for privacy or remote work. Consider using 74+ as a starting point.

Step 3: Under **Apply to**, choose the scope.

* **All countries (default)** — Blockify checks every visitor who uses a VPN or proxy.
* **Selected countries only** — Blockify only acts when the visitor uses a VPN or proxy **and** comes from a country on your list.

![](https://storage.crisp.chat/users/helpdesk/website/-/8/3/8/3/8383e5404a31c000/image_b1yzvw.png)

![](https://storage.crisp.chat/users/helpdesk/website/-/8/3/8/3/8383e5404a31c000/image_1yk1meq.png)

Step 4: Under **Mode**, choose what happens to a visitor whose score reaches your setting.

* **Block** — the visitor sees your blocking page.
* **Redirect to** — enter a URL (the field starts with `https://`); the visitor is sent there instead.

![](https://storage.crisp.chat/users/helpdesk/website/-/8/3/8/3/8383e5404a31c000/configure-proxy-and-vpn-blocke_px9gm9.png)

Step 5: (Optional) Turn on **Allow iCloud Private Relay** to let Safari users on Apple's relay service through. The relay looks like a VPN, so with the switch off Blockify treats these visitors like any other VPN visitor. **iCloud Private Relay only available on Safari browser**.

![](https://storage.crisp.chat/users/helpdesk/website/-/8/3/8/3/8383e5404a31c000/configure-proxy-and-vpn-blocke_k0sqw1.png)

Step 6: Click **Save**. Until you save or discard your changes, you can't open the other sections of **Settings**.

![](https://storage.crisp.chat/users/helpdesk/website/-/8/3/8/3/8383e5404a31c000/20260707-131737_5z45ln.png)

## How it works?

Blockify gives every visitor's IP address a risk score from 0 to 100. The higher the score, the more likely the visitor is hiding who they are or is a bot. When the score reaches your **Risk score starts at** value, Blockify blocks or redirects the visitor, depending on **Mode**.

The descriptions below are the ones shown in the app. "Datacenter" means a server, not a real home or mobile connection.

### Risk levels

| Level | Score | Meaning |
|---|---|---|
| **Risk level 1** | 0–66 | Real user behavior or typical privacy VPN. |
| **Risk level 2** | 67–73 | Some anomalies or bot-like behavior, worth monitoring. |
| **Risk level 3** | 74–100 | Suspicious proxy, datacenter, or clear bot. |

### Recommended thresholds

| Preset | Setting |
|---|---|
| Standard | Set 74+ — block suspicious proxies and bots while allowing legitimate VPN users. |
| Strict | Set 67+ — block anything beyond real user behavior. Use if your store has high chargebacks. |
| Lenient | Set 90+ — block only clear bots and datacenters. Use if most customers use VPN legitimately. |

### Letting trusted VPN users through

Tick **Whitelist if these accesses use VPN.** on a whitelist rule to let the visitors it names through even when this blocker is on. Blockify checks your whitelist rules before your block rules. See [Create a whitelist rule](https://help.omegatheme.com/en/article/create-a-whitelist-rule-1cj5ay1/).

## Who can use this feature?

Available on the **Premium** plan and above.

## FAQs

1. **A real customer was blocked. What should I do?**

Raise **Risk score starts at** (for example to 90+), or whitelist them with **Whitelist if these accesses use VPN.** ticked.

2. **Where can I see who was blocked by this feature?**

In **Analytics**, filter the blocked visitors log by **Block reason** (Proxy/VPN) and date range.

3. **Does the blocker work on the checkout page?**

It protects your store pages, not the checkout. To protect checkout on Shopify Plus, see [Block checkout access by IP, country or VPN](https://help.omegatheme.com/en/article/block-checkout-access-by-ip-country-or-vpn-shopify-plus-1h5lxl2/).

4. **Will Safari users on iCloud Private Relay be blocked?**

Only if **Allow iCloud Private Relay** is off. Turn it on to let them through.