Updated September 2026
Since July 2025, Shopify's email marketing app has filtered out bot-generated subscribers automatically. You don't need to switch anything on. Before each campaign goes out, addresses that Shopify identifies as bot sign-ups are left out of the send. The app is now called Shopify Messaging and covers email, SMS and WhatsApp, and the filtering is still always on.
Here's what the filter does and doesn't do, why bot sign-ups hurt you, and what you should still do yourself to keep your list clean.
What bot-generated subscribers are
Bot-generated subscribers are contacts added by automated software, not by real customers. Bots find signup forms (your newsletter box, a pop-up, the account page) and submit random or invalid addresses, or real addresses that belong to people who never agreed to hear from you.
They cost you in three ways:
- Deliverability. Invalid addresses bounce, and people who never signed up mark your emails as spam. Email providers notice both, and your emails to real customers start landing in spam folders.
- Money. Shopify Messaging prices by the number of messages you send, so every bot on your list is a message you pay for.
- Bad data. Open and click rates drop, and you can't tell whether a campaign worked.
What Shopify's bot filtering does
Bot-generated subscribers are filtered out at the time of sending. They aren't deleted: they stay in your Customers list. The practical effect is that you may see a smaller "sent" number on campaigns than the size of the segment you chose. That's the filter working, not a bug.
Bot filtering is one of three delivery settings that run before every send:
- Bot filtering removes bot-generated subscribers before each send. Always on.
- List health removes subscribers who have bounced, unsubscribed or filed a spam complaint from future campaigns. Always on.
- Smart delivery sends only to engaged subscribers, for example leaving out people who haven't interacted with your recent emails. It's on by default, applies when the send list has more than 1,000 subscribers, and can be switched off in the Shopify Messaging app under Settings, in the Delivery section.
Stop bots at the door
Filtering happens at send time, so bots still get into your customer list. Shopify recommends a few steps to stop them earlier:
- Check hCaptcha is on. Go to Online Store → Preferences and find Spam protection. hCaptcha is on by default for contact, newsletter signup and comment forms, and for login, create account and password recovery pages. It works invisibly for most real visitors.
- Audit every signup form. Pop-ups, quizzes and giveaways added by apps may not be covered by Shopify's hCaptcha. Check each one has its own bot protection.
- Don't stack captchas. Shopify notes that hCaptcha isn't compatible with custom code or apps that add their own CAPTCHA. Use one or the other.
- Consider double opt-in. Asking new subscribers to confirm by email filters out bots and accidental sign-ups before they reach your list.
Clean your list regularly
Even with every filter on, lists decay. Once a quarter:
- Build a customer segment of subscribers who have never opened an email or bought anything, and decide whether to keep them.
- Look for addresses with unusual domains, strings of random characters, or lots of sign-ups arriving at the same minute.
- Remove subscribers who signed up long ago and have never engaged.
Related reading
Bots don't only sign up for newsletters. If fake orders are the problem, read our survival guide to your first wave of fraudulent orders. For signup forms that respect your visitors, see our take on cookie pop-ups, and for the bigger picture on keeping customers engaged, conversion tips that actually work for a new store. The original announcement is in Shopify's changelog.