Platform update · Shopify
New protection against unexpected redirects in Shopify stores
Shopify has updated how its online stores handle links to suspicious and malicious websites, including when to show a confirmation or block a link.
Shopify’s protection for online stores changes the messages customers see when a link takes them to a website outside the store. Under the October 23, 2026 update, the behavior depends on how the destination website is classified.
Confirmation for suspicious links
For links to websites Shopify identifies as suspicious, customers see a short message that includes the website’s address. They can continue to the website or return to the store.
Connected store domains, supported Shopify websites, and social websites do not trigger the message. It might still appear for websites owned by the store owner but not connected to the store.
Malicious websites are blocked
With the update, Shopify blocks links only to websites it has identified as malicious. It asks for confirmation for suspicious websites, while customers go directly to other websites without seeing a message.
The updated behavior determines whether customers see a message or a link is blocked based on Shopify’s classification of the destination website.