How to spot a Shopify expert scam: the red flags

You launch your store, and within a day your inbox fills up. "I noticed some issues with your store." "I can fix your SEO." "Your speed score is costing you sales." Each one comes from a Shopify expert you've never heard of.

If they slid into your DMs, that's red flag number one. Plenty of good freelancers exist, and some of the people messaging you may even mean well. But this is also how a lot of scams start, and the warning signs are easy to check for.

Here's how to tell the difference, how to keep control of your store whoever you hire, and the two kinds of "expert work" that look impressive and do nothing. Once you've ruled out the scams, our 14 questions to ask before hiring a Shopify developer help you compare the rest.

The red flags

None of these alone proves someone is a scammer. Two or three together are a good reason to slow down, ask more questions, or look elsewhere.

They contacted you first

A message that arrives just after you launch, from someone who hasn't asked a single question about your business, is likely a template sent to many new stores at once. That doesn't make the sender a scammer, but it means they haven't looked closely at your store yet.

Watch for messages that claim to come from Shopify itself, warning about your theme licence or your account and offering a paid "audit" to fix it. Genuine emails from Shopify come from a shopify.com address. If you're unsure, ignore the message and check your admin directly.

They won't show you the work before it goes live

A professional edits a copy of your theme, not your live store, and sends you a preview link to check before anything is published. Shopify builds this in: any unpublished theme can be previewed, and shared from the preview bar. Shopify notes that visitor preview links expire after 2 days, so a working freelancer will send you fresh ones as the work goes on.

If someone wants to edit your live theme directly, or can't show you what they've done until you've paid, that's a problem.

They want your password

You should never hand over your owner login. Shopify has a proper way to give someone access: a collaborator account. If someone asks for your email and password instead, they're either inexperienced or they want more control than they should have. More on how to set access up properly below.

They only take PayPal friends and family

PayPal's Purchase Protection doesn't cover payments sent as friends and family. Someone who insists on it is asking you to give up the one way you could get your money back. Pay through a method that offers protection, against an invoice with the work written down.

They won't get on a video call

A short call to talk through the job is normal. If someone keeps finding reasons not to show their face or talk live, ask yourself why.

They upsell before the first job is finished

You hired them to fix a product page. Now they're pitching SEO, an app migration and a monthly retainer, and the product page still isn't done. Finish one piece of work, check it, pay for it, then decide on the next.

They promise rankings or a perfect score

No one can promise you the top spot on Google. And a "100 speed score" means less than it sounds, as you'll see below.

One more check: Shopify runs a Partner Directory of agencies and freelancers. It's a better starting point than your inbox. Shopify notes that partners work independently, though, so check reviews and real work samples there too.

Keep control of your store and your files

Whoever you hire, set things up so you can walk away at any point with everything you paid for.

Use a collaborator account, never your login

Shopify partners get access to your store through a collaborator request. Here's how it works:

1. Go to Settings → Users & permissions → Security (or Settings → Users → Security if your store is part of an organisation). Copy your 4-digit collaborator request code.
2. Give that code to the partner. They can only send a request if they have it.
3. Accept the request, and choose only the permissions they need for the job.

Collaborators don't count towards your plan's user limit. Shopify won't let a collaborator take ownership of your store. And when the work is done, you can remove their access from the same settings, or it lapses on its own after 90 days of not logging in.

Make sure everything is in your name

The store, the domain, the theme and every app should be on your account, not the freelancer's. This matters most for the theme: a theme from the Shopify Theme Store is licensed only to the store that bought it. If someone installs a theme they bought elsewhere, Shopify can flag it as unlicensed, and you won't be able to customise or publish it until you buy it yourself.

Download your theme before the final payment

Before you pay the last invoice, take a copy of the work. In Online Store, use the ⋯ menu on the theme and choose Download theme file. Shopify emails a zip of the theme to the address on your staff account.

That zip holds the theme only. Your products, collections, pages and files stay in your store, so they're safe as long as the store is yours.

Fake speed fixes and AI filler

The last red flag is harder to spot, because the work looks done.

Speed fixes that only fool the test

Some "speed optimisation" services and apps don't make your store faster. They detect the tools that measure speed and show them a lighter page, so the score jumps while your customers wait just as long. Shopify's own performance team looked at extensions that promised one-click optimisation and found that almost 15% were doing this.

How to check:

• Look at Shopify's web performance report (Online Store → Themes for the summary, or under Analytics → Reports). It's based on real visits, not a test tool.
• Shopify's advice: if your real-visit numbers are slower than the score a testing tool gives you, you might have a performance hack on your site.
• Ask anyone selling speed work what they'll actually change: images, apps, scripts. If the answer is a score, not a change, pass.

AI filler passed off as expert work

AI tools can draft product descriptions, blog posts and SEO text in seconds. That's useful. Shopify Magic does it inside your admin, free on every plan.

The problem is when generic AI text is sold to you as expert copywriting or an "SEO package". Read what you've been sent. If it could describe any product in your category, mentions nothing only you would know, and repeats the same phrases from page to page, you've paid for something you could have made yourself in a minute.

Good copy uses what makes your product different: what it's made of, who it's for, why people come back. If what you've been sent has none of that, ask for a rewrite before you pay.

What to do next

Before you hire anyone for Shopify work:

1. Ignore cold messages, especially ones claiming to be from Shopify.
2. Ask for work on an unpublished theme with a preview link.
3. Give access through a collaborator request code, never your password.
4. Pay against an invoice, with protection, one job at a time.
5. Keep the store, theme and apps in your name, and download the theme before the final payment.

Our prices are public, so you can compare any quote against them. And if you want a second pair of eyes on your store, or on a quote you've been sent, talk to us.