Skip to main content

Shopify clone detection. Know who’s copying your store.

Recon watches for clones and lookalikes, and shows you where to report them.

Illustrative Recon Lookalikes interface with fictional Northfell data

Two results for your brand name

A shopper searching for you sees both. Only one is yours.

Search result · position 1 Your store

Yourbrand | Official Store

yourbrand.com/collections/best-sellers

Domain
Yours
Payment
Shopify Payments
Certificate
Organisation-validated
Search result · position 3 (paid) Clone · taking payment

Yourbrand Outlet | 70% Off

yourbrand-outlet.com/collections/best-sellers

Domain
Registered 4 days ago
Payment
Third-party processor
Certificate
Domain-validated only

Shoppers can mistake the clone for your real store.

Recon checks whether each address is parked, inactive or a live store.

Illustrative example · synthetic data · demonstration domains are fictional

What Recon reads on every variant

Lookalike domains
Typos, swapped letters, other endings and sale-style names that are registered.
38 registered
Store clones
Sites using your products, photos or theme code.
2 live
Redirect chain
Where a domain really sends a shopper.
Followed
Payment destination
Whether payment goes somewhere that isn’t yours.
1 third-party
Certificate
Clones have valid certificates too. Recon records when it was issued.
Recorded

What Shopify clone detection looks for

A cloned storefront copies the parts shoppers recognize: your product photos, descriptions, logo and page layout. It may offer a discount or claim to be an outlet. Customers can think they are buying from you even though the payment goes to someone else. The resulting complaints can reach your real support team.

The address is only one clue. A fake store might use a misspelled version of your name, an extra word such as “sale”, or a completely unrelated domain. A similar address can also belong to an unrelated business or one of your own regional stores. Review what the site actually shows before treating it as impersonation.

Two ways Recon keeps watch

Recon checks lookalike versions of your domain and records what the registered addresses do. A finding may show a parked page, a redirect, a live store or a security-list result. These checks help you see when a suspicious address needs a closer look instead of searching for each variation yourself.

Clone detection uses an optional block in your Shopify theme. When someone copies code that includes the block and that code loads on another domain, it sends Recon a signal with page details. The block returns immediately on your own domains and does not send customer data. Enable it in your theme after installing the app.

The block cannot detect every kind of clone. Someone who copies only images, rebuilds the design, removes the block or never loads the copied code may not trigger it. Domain checks and merchant reports are useful alongside it. Recon does not guarantee that it can find every fake store on the internet.

A finding you can investigate

Open a case in your Shopify admin to see the suspicious address and the evidence Recon recorded. Depending on the finding, that can include the page title, clone signal, observation time, redirect, registrar and reporting contact. Keeping those details together gives your team a starting point for review.

Compare the suspicious page with your original store. Check the copied photos or text, the business identity it claims and where it takes a shopper. Save screenshots and exact page URLs before contacting a provider. A site can change after it has been reported, so keep a dated copy of the evidence you relied on.

From detection to a report

Different problems need different reporting channels. Copied photos or original text may support a copyright notice. Credential theft or a deceptive payment flow belongs in an abuse or phishing report. A confusing domain or use of your brand name may need another route. Describe what you observed rather than assuming one notice covers everything.

Click “Take it down” on a clone. Our team checks it, then we report it and follow up. Included in Pro, or $15 per takedown on Free. The host, registrar or platform decides whether to act, so a report does not guarantee removal.

Warn shoppers on a clone of your store

Some clones show your real store’s pages on another address. On a clone like that, Recon can add a red bar at the top of every page: “This is not the official Yourbrand website. Do not enter personal or payment details.” The bar links shoppers to your real store.

The warning is off by default. You turn it on for each clone, from its case in the app. It only shows on a site that loads your store’s pages, and never on your own domains. It is on Pro. The warning does not take the clone down, so keep reporting it.

Keep monitoring after the first finding

A parked address can become a live storefront later. A removed clone may return under another address. Recon keeps checking on scheduled sweeps so you can review new findings and changes from your admin. This is the reason to install it even when you have no active case to handle today.

Free includes weekly domain scans, and new findings arrive in the weekly summary. Pro runs daily sweeps and sends an email within minutes of a recorded clone. With the theme block enabled, both plans record the clone when copied code loads; the timing of the email is different. On Pro, we also report clones for you and follow up.

Questions before you install

Can Recon detect a copied store on a completely different domain?

Yes, if the copied code still includes the theme block. Lookalike domain checks find clones on similar names.

Does a lookalike domain mean someone cloned my store?

No. A lookalike is a lead to review. It may be parked, unrelated or yours.

Will Recon take a copied site down automatically?

No. Nothing starts until you click “Take it down”. Then our team checks it, reports it and follows up. The host or registrar decides whether to remove it.

Recon keeps watch. You run your store.