Appstle℠ Subscriptions App
Meets our highest standards for performance, design, and integration. Learn moreOpens in new window
Reviews (8,397)
While I was talking with Appstle support, my Shopify account was compromised. Approximately $4,500 was transferred from my Shopify account, and there was a later attempt to make about $2,500 in charges on my Shopify credit card. Shopify locked my account for suspicious activity, and the incident remains under investigation. The timing has left me with serious concerns about my experience.
UPDATE:
1. Per screenshots shared by merchant with Shopify and Appstle, the unlawful activity happened via merchant's own sign in credentials, and not Appstle's collaborator account.
2. The timestamp of the unlawful login was before Appstle had any collaborator access to the merchant's store.
3. Per Shopify restrictions for collaborators that the Shopify team shared as a part of the investigation, Appstle and other app partners CANNOT and DO NOT have access to merchant's credit card or finances. Only their staff do. Relevant links are below:
- https://help.shopify.com/en/manual/your-account/users/security/collaborator-accounts
- https://help.shopify.com/en/manual/finance/shopify-balance/managing-account/view-account-info#allow-staff-to-view-shopify-balance-account-activity
4. Shopify is working with merchant on new login credentials and security.
FIRST RESPONSE:
This is Ria, the Co-founder of Appstle.
We've conducted a thorough review. First and foremost, Shopify collaborator access is strictly limited to the permissions granted by the merchant. Based on Shopify's collaborator permission model, collaborators DO NOT HAVE ACCESS to a store's payment methods or the ability to add, modify, or use a merchant's credit card.
That said, we'd genuinely like to understand what happened and help you get to the bottom of it. We take concerns like this extremely seriously and have started a high-priority ticket with Shopify to investigate this ASAP.
Please feel free to reach out to me anytime at ria@appstle.com. We're committed to understanding what occurred and resolving this matter as quickly and transparently as possible. We are there for you every step of the way.
