That Shop App Receipt You Don't Recognize Is a Scam
Emily Long
Emily Long
Freelance Writer
Experience
Emily Long is a freelance writer based in Salt Lake City.
After graduating from Duke University, she spent several years reporting on the federal workforce for Government Executive, a publication of Atlantic Media Company, in Washington, D.C. She has nearly a decade of experience as a freelancer covering tech (including issues related to security, privacy, and streaming) as well as personal finance and travel.
In addition to Lifehacker, her work has been featured on Wirecutter, Tom’s Guide, and ZDNET. Emily has also worked as a travel guide around the U.S. and as a content editor. She has a masters in social work and is a licensed therapist in Utah.
Areas of Expertise
Read Full Bio
June 29, 2026
Add as a preferred source on Google Add as a preferred source on Google
Credit: Zooey Liao/Lifehacker/Getty Images
Key Takeaways
- Scammers are inserting fake orders that appear to be from legitimate companies into Shop users' histories.
- This callback phishing scheme aims to steal personal information or gain remote device access.
- If you see a purchase you didn't make, don't call the number. Treat it as a scam.
Table of Contents
If you see a receipt in your Shop app for a purchase you didn't make, proceed with caution. Scammers have managed to insert fake orders—that appear to be from legitimate companies like Apple, Norton, and PayPal—into Shop users' histories as part of a callback phishing campaign.
Fake purchase receipts are a favorite scam tactic for PayPal impersonators, who frequently use email notifications to trick targets into calling a fraudulent support number or clicking a phishing link.
How the Shop order scam works
As BleepingComputer reports, Shop users are seeing fake invoices in addition to real purchases in their order tracking history. These fraudulent receipts may say that a charge (usually for a large amount) has been processed, an order has been prepared, or a subscription has been renewed.
They also list an email and/or phone number for disputing the purchase, but if you call, you'll reach scammers pretending to be support agents. The goal is to get customers to hand over personal information like login credentials, credit card information, or authentication codes or even download malware that lets scammers remotely access your device.
Researchers at cybersecurity firm Gen Digital, which identified the scam, found that these fake purchase notifications contain some obvious red flags, like poor grammar and spelling. However, Shop is a widely used and largely trusted app, so users have little reason to suspect a scam and therefore may be more likely to call a support line or engage with a receipt in some way. Plus, a notification inside an app may raise fewer alarms than a phishing email.
Your Shop history tracks orders paid for with Shop Pay and purchased from stores that use Shopify as long as you entered the email associated with your Shop account at checkout. It also pulls tracking information from Gmail and Outlook by scanning messages for keywords like "tracking number" and "track your package," so you may see pending deliveries that originated outside the Shop ecosystem.
What do you think so far?
Researchers note that it's not clear exactly how threat actors are inserting fake orders into user histories, nor is there evidence that Shop, Shopify, or any companies being impersonated have been breached. Shop has simply said that they are implementing "new controls" to mitigate the issue.
What to do if you see a Shop purchase you don't recognize
Don't automatically assume a receipt for an unknown purchase is legitimate, whether it pops up in the Shop app or your email. Check your bank or credit card statements as well as your account history with the listed vendor to see if there's a purchase that matches. If you don't find one, the invoice itself is almost certainly a scam, and you should not engage with it. Don't call the number, send an email, or click any links.
If you haven't done any of these things, you can just ignore the notification or report it directly to Shop and the listed vendor. If you've called or given up any information, change your password (ideally on a different device) and keep an eye on any suspicious login attempts or unfamiliar charges on your accounts.
Lifehacker has been a go-to source of tech help and life advice since 2005. Our mission is to offer reliable tech help and credible, practical, science-based life advice to help you live better.
- Our Mission
- Our Team
- Newsletter
© 2001-2026 Ziff Davis, LLC., A ZIFF DAVIS COMPANY. ALL RIGHTS RESERVED.
Lifehacker is a federally registered trademark of Ziff Davis and may not be used by third parties without explicit permission. The display of third-party trademarks and trade names on this site does not necessarily indicate any affiliation or the endorsement of Lifehacker. If you click an affiliate link and buy a product or service, we may be paid a fee by that merchant.