Securify help for Shopify merchants
How to block an email or a domain
Keep a customer, a domain or a series of addresses out of your store and your checkout. Not sure you should? See [When to block an email](10-when-to-block-an-email.md).
Block an email, a domain or a pattern
- Open Securify from Apps in your Shopify admin.
- Open Block Emails in the menu.
- Under Quick Actions, click Block an email.
- Enter one of these:
- an exact email, such as
user@example.com - a domain, such as
@tempmail.com - a prefix pattern, such as
hrysy*@mail.com, to catch a series of addresses on one domain
- an exact email, such as
- Add a reason if you want one, then click Add.
The rule appears in your Email Blocklist. A domain or a pattern also adds one row for each existing customer it matches, so the count can jump. When a blocked customer logs in and visits your store, they see the block page. Guest visitors are not affected.
Email rules depend on your plan. If the buttons are greyed out, message us in the chat.
Block at checkout too
- On the Block Emails page, switch Block at checkout to On.
- If Activation required appears, go to Settings → Checkout in your Shopify admin, open Checkout rules and click Add rule.
- Select Email Validation, enter a title, set the status to Active and click Save.
- Go back to Securify. The page says Checkout validation is active.
Blocked emails then cannot complete checkout.
Always allow an email
An email on the Email Allowlist gets past your other rules. Use it for trusted customers.
- Under Quick Actions, click Allow an email.
- Enter the email, domain or pattern, then click Add.
On your storefront, this works only while the customer is logged in, and the email must belong to a Shopify customer. An exact email with no customer yet shows Pending. At checkout, it also works for guests.
Remove or change a rule
- To remove one rule, click Remove on its row. Removing a domain's row also removes the rows it added for customers.
- Removing only one customer's row leaves the domain rule in place, so checkout still blocks them. To let one customer through a domain rule, add their exact email to the Email Allowlist.
- Rules cannot be edited. To narrow a rule, remove it and add a new one.
- To empty a list, click Clear All on it.
Still stuck? Open the chat bubble in the Securify app or email dev@otp.plus.