Ecommerce Security
articles.
Every Skyfense post tagged ecommerce security.
Shopify app delistings and the checkout hijack: what merchants should do now
Apps are disappearing from the Shopify App Store after fake checkout redirects hit stores in October 2026. Here's what is confirmed, how to check your store, and how to pick replacement apps.
Shopify order fraud: why the order alone isn't enough
Checking an order's details catches some fraud. Matching it to the visit that produced it catches much more. Here's how to combine the two.
Stopping a bad order before it exists: checkout validation on Shopify
Cancelling a fraudulent order is cleanup. Rejecting it during checkout means there is nothing to clean up. Here's how pre-payment validation works.
Using Shopify Flow to react to risky visits and orders
Shopify Flow can turn a fraud signal into an action: a tag, a hold, a message to your team. Here's a practical way to set it up.
Session hijacking and fingerprint drift: what changes when an account is taken over
A hijacked session usually still has a valid login. What changes is everything underneath it, and that's what a fingerprint-drift check is built to notice.
Card testing: the automated fraud that costs you before a human ever sees it
Card testing scripts run stolen card numbers through your checkout in bulk, looking for ones that work. Here's how it shows up and how to catch it early.
CAPTCHA vs. invisible detection: what actually stops fraud without losing sales
CAPTCHAs punish every visitor to catch a few bots. Invisible, behavior-based detection can do better without the friction.