Skip to main content

Alerts

Alerts notify you when important events happen - high-risk orders, new phishing sites, or unusual threat activity.

Alert Types​

Fraud Order Alerts​

Get notified when a potentially fraudulent order comes in:

  • Immediate notification
  • Includes risk score and signals
  • Lets you act before shipping

Recommended for: All merchants

Phishing Detection Alerts​

When we discover a new phishing site:

  • Domain and confidence score
  • Quick link to view details
  • Suggested actions

Recommended for: Pro and Enterprise plans

Counterfeit Detection Alerts​

When we find a new counterfeit listing:

  • Marketplace and URL
  • Matched product
  • Threat confidence

Recommended for: Enterprise plans

Threshold Alerts​

When activity exceeds normal levels:

  • Unusual spike in bot activity
  • Surge in protection events
  • Potential attack detection

Recommended for: All merchants

Daily/Weekly Digest​

Summary of all activity:

  • Threat counts for the period
  • Notable events
  • Recommended actions

Recommended for: Busy merchants who can't check daily

Setting Up Alerts​

Email Alerts​

  1. Go to Alerts in the sidebar
  2. Enter email addresses (comma-separated for multiple)
  3. Select which alert types to receive
  4. Set frequency (immediate, daily, weekly)
  5. Click Save

Webhook Alerts​

For technical integration (Slack, Discord, custom systems):

  1. Go to Alerts in the sidebar
  2. Enable Webhook Alerts
  3. Enter your webhook URL
  4. Test the webhook
  5. Click Save

Webhook Payload​

{
  "type": "fraud_order",
  "shop": "mystore.myshopify.com",
  "timestamp": "2024-03-15T10:30:00Z",
  "data": {
    "orderNumber": "#1234",
    "riskLevel": "high",
    "riskScore": 78,
    "signals": ["bot_detected", "vpn_used"]
  }
}

Alert Frequency​

TypeOptions
Fraud ordersImmediate only
PhishingImmediate or daily
CounterfeitImmediate or daily
ThresholdImmediate only
DigestDaily or weekly

Recommendation:

  • Critical alerts (fraud) → Immediate
  • Detection alerts → Daily (reduces noise)
  • Summary → Weekly

Configuring Thresholds​

For threshold alerts, set when to notify:

Bot Activity Threshold​

"Alert me when bot detections exceed ____ per hour"

  • Default: 50 per hour
  • Low traffic stores: Set to 20
  • High traffic stores: Set to 200

Protection Event Threshold​

"Alert me when protection events exceed ____ per hour"

  • Default: 100 per hour
  • Adjust based on your normal activity

Managing Alert Fatigue​

Too many alerts? Adjust your settings:

Reduce Noise​

  1. Switch to digests - Daily summary instead of immediate alerts
  2. Raise thresholds - Only alert on significant events
  3. Filter alert types - Only critical alerts

Categorize by Urgency​

UrgencyAlert TypeFrequency
CriticalFraud ordersImmediate
HighPhishing (80%+)Immediate
MediumCounterfeitDaily digest
LowSpy detectionWeekly digest

Slack Integration​

To send alerts to Slack:

  1. Create a Slack webhook (Slack → Apps → Incoming Webhooks)
  2. Copy the webhook URL
  3. Paste into Store Shield webhook settings
  4. Test the connection

Alerts will appear in your chosen Slack channel.

Discord Integration​

To send alerts to Discord:

  1. Go to Server Settings → Integrations → Webhooks
  2. Create a new webhook
  3. Copy the webhook URL
  4. Paste into Store Shield webhook settings

Custom Integrations​

For custom systems, use our webhook format:

Headers​

Content-Type: application/json
X-StoreShield-Signature: <signature>

Verifying Webhooks​

Verify webhook authenticity with the signature header:

const crypto = require('crypto');
const signature = crypto
  .createHmac('sha256', webhookSecret)
  .update(payload)
  .digest('hex');

Testing Alerts​

Before relying on alerts:

  1. Go to Alerts
  2. Click Send Test Alert
  3. Verify you receive it
  4. Check formatting looks correct

Troubleshooting​

"I'm not receiving alerts"​

  1. Check spam/junk folder
  2. Verify email address is correct
  3. Check that alert types are enabled
  4. Send a test alert

"Too many alerts"​

  1. Switch to daily digest
  2. Raise thresholds
  3. Disable non-critical alert types

"Webhook not working"​

  1. Test the URL with curl/Postman
  2. Check your server logs
  3. Verify URL is publicly accessible
  4. Check firewall settings

Best Practices​

For Small Stores​

  • Email alerts for fraud orders (immediate)
  • Weekly digest for everything else
  • Review when you have time

For Medium Stores​

  • Email alerts for fraud + phishing (immediate)
  • Daily digest for other activity
  • Weekly review of trends

For Large Stores​

  • Webhook to Slack/ops channel
  • Immediate alerts for critical threats
  • Dedicated person to monitor

For Agencies Managing Multiple Stores​

  • Webhook integration with your dashboard
  • Consolidated alerts per client
  • Daily summaries per store