Configure Proxy and VPN blocker
Overview
Stop visitors who hide their real location from reaching your store. Proxy and VPN blocker blocks visitors who connect through a VPN, a proxy or a server instead of a real home or mobile connection. Blockify gives each visitor a risk score from 0 to 100 (how risky Blockify thinks their connection is), and you choose the score at which to block. Use it when fraud or fake traffic comes from hidden locations. You find it in Settings > Risk Mitigator.
What you'll learn
How to enable Proxy and VPN blocker?
Step 1: Go to Settings > Risk Mitigator and turn on Proxy and VPN blocker.
Step 2: Set Risk score starts at: drag the slider to a value from 0 to 100, using the recommended thresholds as a guide. Visitors with this score or higher are blocked or redirected.
Step 3: Under Apply to, choose the scope.
- All countries (default) — Blockify checks every visitor who uses a VPN or proxy.
- Selected countries only — Blockify only acts when the visitor uses a VPN or proxy and comes from a country on your list.
Step 4: Under Mode, choose what happens to a visitor whose score reaches your setting.
- Block — the visitor sees your blocking page.
- Redirect to — enter a URL (the field starts with
https://); the visitor is sent there instead.
Step 5: (Optional) Turn on Allow iCloud Private Relay to let Safari users on Apple's relay service through. The relay looks like a VPN, so with the switch off Blockify treats these visitors like any other VPN visitor. iCloud Private Relay only available on Safari browser.
Step 6: Click Save. Until you save or discard your changes, you can't open the other sections of Settings.
How it works?
Blockify gives every visitor's IP address a risk score from 0 to 100. The higher the score, the more likely the visitor is hiding who they are or is a bot. When the score reaches your Risk score starts at value, Blockify blocks or redirects the visitor, depending on Mode.
The descriptions below are the ones shown in the app. "Datacenter" means a server, not a real home or mobile connection.
Risk levels
Level | Score | Meaning |
|---|---|---|
Risk level 1 | 0–66 | Real user behavior or typical privacy VPN. |
Risk level 2 | 67–73 | Some anomalies or bot-like behavior, worth monitoring. |
Risk level 3 | 74–100 | Suspicious proxy, datacenter, or clear bot. |
Recommended thresholds
Preset | Setting |
|---|---|
Standard | Set 74+ — block suspicious proxies and bots while allowing legitimate VPN users. |
Strict | Set 67+ — block anything beyond real user behavior. Use if your store has high chargebacks. |
Lenient | Set 90+ — block only clear bots and datacenters. Use if most customers use VPN legitimately. |
Letting trusted VPN users through
Tick Whitelist if these accesses use VPN. on a whitelist rule to let the visitors it names through even when this blocker is on. Blockify checks your whitelist rules before your block rules. See Create a whitelist rule.
Who can use this feature?
Available on the Premium plan and above.
FAQs
- A real customer was blocked. What should I do?
Raise Risk score starts at (for example to 90+), or whitelist them with Whitelist if these accesses use VPN. ticked.
- Where can I see who was blocked by this feature?
In Analytics, filter the blocked visitors log by Block reason (Proxy/VPN) and date range.
- Does the blocker work on the checkout page?
It protects your store pages, not the checkout. To protect checkout on Shopify Plus, see Block checkout access by IP, country or VPN.
- Will Safari users on iCloud Private Relay be blocked?
Only if Allow iCloud Private Relay is off. Turn it on to let them through.
Updated on: 16/10/2026
Thank you!