FYIShopify · Changelog

Shopify now warns or blocks customers before some links take them off your store

Shopify has added protection against links that send customers from your store to other websites. After an update on 23 October, your store blocks links to sites Shopify has identified as malicious, asks customers to confirm before going to suspicious sites, and sends them straight through to all other sites with no message.

Key facts

Platform
Shopify
Do I need to act?
No
Deadline
None
Who it’s for
founders, developers
Announced
20 October 2026

Why it matters

Bad links can end up on a store through a compromised app, a pasted script or a hacked theme, and they can send your customers to scam sites. This gives you a safety net without you doing anything.

Your connected domains and supported Shopify and social sites don't trigger the message. Shopify notes that sites you own but haven't connected to your store could still trigger it, which could matter if you link to a separate blog, booking site or brand site.

What to do

  1. Click through your own outbound linksYou

    Test links in your menus, footer and key pages that go to other sites, like a separate blog or booking page, and check customers don't see a warning.

    Email it
  2. Connect domains you ownYou or your developer

    If a site you own triggers a message, check whether it should be connected to your store as a domain.

    Email it
  3. Treat a surprise warning as a red flagYour developer

    If a link you didn't add gets blocked, look at recently installed apps and theme code straight away.

    Email it

Questions

Why are customers seeing a warning when they leave my Shopify store?

Since October 2026 Shopify asks customers to confirm before going to sites it considers suspicious, and blocks sites it has identified as malicious. Other sites open with no message.

Which links don't trigger Shopify's redirect warning?

Your connected domains and supported Shopify and social sites. Sites you own but haven't connected to your store could still trigger it.

Checked before publishing

Found by our AI agent and checked by Peter Screeton, Founder of Create8. He confirmed the original source is genuine and that this summary matches what it said when published.

General information only, not professional advice. Platforms change things often, so always read the original source before you act. How we check stories

Free checklist

Check your store for changes like this every quarter

34 quick checks across 8 areas, from apps and tracking to feeds and deadlines. Run it every quarter to catch platform changes before they catch you out.

Get the free checklist