Fake Refund Scam Hits Shopify Shop App Users

This report describes a 2026 campaign where scammers create or compromise Shopify stores to send native Shop app invoice and shipment notifications that prompt victims to call a fraudster-controlled support number; callers are steered into classic refund scams involving remote-access tools, fake refunds, and coerced gift-card or bank transfers. The abuse of Shopify's legitimate notification pipeline (a LoTS variant) makes the lures more convincing and has been observed across multiple victims and platforms.