Shopify clone detection. Know who’s copying your store.

A cloned storefront copies the parts shoppers recognize: your product photos, descriptions, logo and page layout. It may offer a discount or claim to be an outlet. Customers can think they are buying from you even though the payment goes to someone else. The resulting complaints can reach your real support team.

The address is only one clue. A fake store might use a misspelled version of your name, an extra word such as “sale”, or a completely unrelated domain. A similar address can also belong to an unrelated business or one of your own regional stores. Review what the site actually shows before treating it as impersonation.

• Understand cloned websites and copied stores

Recon checks lookalike versions of your domain and records what the registered addresses do. A finding may show a parked page, a redirect, a live store or a security-list result. These checks help you see when a suspicious address needs a closer look instead of searching for each variation yourself.

Clone detection uses an optional block in your Shopify theme. When someone copies code that includes the block and that code loads on another domain, it sends Recon a signal with page details. The block returns immediately on your own domains and does not send customer data. Enable it in your theme after installing the app.

The block cannot detect every kind of clone. Someone who copies only images, rebuilds the design, removes the block or never loads the copied code may not trigger it. Domain checks and merchant reports are useful alongside it. Recon does not guarantee that it can find every fake store on the internet.

Open a case in your Shopify admin to see the suspicious address and the evidence Recon recorded. Depending on the finding, that can include the page title, clone signal, observation time, redirect, registrar and reporting contact. Keeping those details together gives your team a starting point for review.

Compare the suspicious page with your original store. Check the copied photos or text, the business identity it claims and where it takes a shopper. Save screenshots and exact page URLs before contacting a provider. A site can change after it has been reported, so keep a dated copy of the evidence you relied on.

Different problems need different reporting channels. Copied photos or original text may support a copyright notice. Credential theft or a deceptive payment flow belongs in an abuse or phishing report. A confusing domain or use of your brand name may need another route. Describe what you observed rather than assuming one notice covers everything.

Recon supplies evidence and reporting contacts, and prepares notices for you to review and send from your own address. The host, registrar or platform decides whether to act. You can follow the domain’s status in Recon after reporting, but detection and a prepared notice do not guarantee removal.

• What to do when someone clones your Shopify store
• DMCA templates and notice generator
• How to report a fake Shopify store

Some clones show your real store’s pages on another address. On a clone like that, Recon can add a red bar at the top of every page: “This is not the official Yourbrand website. Do not enter personal or payment details.” The bar links shoppers to your real store.

The warning is off by default. You turn it on for each clone, from its case in the app. It only shows on a site that loads your store’s pages, and never on your own domains. It is on every plan. The warning does not take the clone down, so keep reporting it.

• How to warn shoppers on a clone

A parked address can become a live storefront later. A removed clone may return under another address. Recon keeps checking on scheduled sweeps so you can review new findings and changes from your admin. This is the reason to install it even when you have no active case to handle today.

Free includes weekly domain scans, and new findings arrive in the weekly summary. Paid runs daily sweeps and sends an instant email for a recorded clone event. With the theme block enabled, both plans can record that event when copied code loads; the timing of the email is different. Choose the plan based on how quickly you need to hear and how many domains you want checked.

• Compare monitoring plans and alert timing