--- type: blog title: "Is Shopify Legit? A Straight Answer for Sellers and Shoppers (2026)" description: "Shopify is a real, publicly traded company and a safe platform to sell on. A store built on Shopify is a different question. Here is how to check both." date: "2026-11-12" lastModified: "2026-11-12" authors: "Runner AI Team" tags: ["Shopify", "E-Commerce", "Platforms", "Security"] featured: false readTime: "8 min read" seo: title: "Is Shopify Legit and Safe? Sellers vs Shoppers" description: "Yes. Shopify trades as SHOP on Nasdaq and TSX, is PCI DSS Level 1, and powered $119B in Q3 2026 sales. But not every Shopify store is legit. How to check." --- Yes, Shopify is legit. It is a publicly traded company, it is certified PCI DSS Level 1 for card data, and its merchants sold $119 billion of goods through it in one quarter of 2026. But Shopify is software that anyone can use to open a store, so "Shopify is legit" does not mean "every Shopify store is legit." If you are a seller, the real risks are payout holds and account phishing. If you are a shopper, you need to check the store, not the platform. > **Key Takeaways** > > - **Shopify is a public company.** Its stock trades as SHOP on Nasdaq and the Toronto Stock Exchange, and it files results with the SEC. Q3 2026 revenue was $3.742 billion ([Shopify](https://www.shopify.com/investors/stock-information), [SEC](https://www.sec.gov/Archives/edgar/data/0001594805/000159480526000067/exhibit991pressreleaseq320.htm), retrieved 2026-11-12). > - **Card data is handled to the top standard.** Shopify is certified Level 1 PCI DSS compliant, and that extends by default to every store on the platform. > - **The seller risk is cash flow, not fraud.** Shopify Payments can hold payouts or keep a reserve. Shopify's own reserve examples run for 120 days. > - **A shopper must judge each store.** Shopify is not the seller. If a store does not answer for 30 days, Shopify has a form to report the order. > - **Pay with a card or a provider that lets you dispute a charge.** That is the protection that works when a store turns out to be fake. ## Is Shopify a legit company? Yes. Shopify Inc. lists its shares on two exchanges, Nasdaq and the TSX, under the ticker SHOP. Public companies must publish audited results, and Shopify files them with the US SEC and on SEDAR+ in Canada. The size of the business is public too. In its results for the quarter ended September 30, 2026, Shopify reported: | Measure (Q3 2026) | Amount | |---|---| | Gross merchandise volume (GMV) | $119,145 million | | Revenue | $3,742 million | | Revenue growth, year over year | 32% | Shopify also says that "millions of businesses in 175+ countries" use it. A company of this size with public filings is not a fly-by-night operation. If you are asking whether Shopify the company will take your money and vanish, the answer is no. That does not settle whether Shopify is a good deal for you. Cost and fit are separate questions, and we cover them in [Is Shopify worth it?](./is-shopify-worth-it) and [Is Shopify free?](./is-shopify-free). ## Is Shopify safe for sellers? On the technical side, yes. Shopify publishes three security facts on its own pages: - **PCI DSS Level 1.** Shopify says it is "certified Level 1 PCI DSS compliant" and that this "extends by default to all stores powered by Shopify." It covers the cart and the web hosting. You do not need to set anything up to get it. - **SOC 2 Type II and SOC 3 reports.** Independent auditors have issued these for Shopify's customer-facing service. A store owner can read them from the Shopify admin. - **A transparency report.** Shopify publishes data about legal requests it gets for merchant and customer data. The weak point is usually the account, not the platform. Shopify's account security guide asks owners to do three things: 1. Turn on two-step authentication. Shopify Payments requires it. 2. Do not share the owner login, not even with staff. 3. Give each person their own staff account with only the permissions they need. Phishing is the other common problem. Shopify says it sends email only from `@shopify.com`, `@email.shopify.com`, `@em.shopify.com` and `@shopify-billpay.melio.com`. Its help center states that emails from Gmail, Yahoo, Apple Mail or Hotmail "aren't from Shopify." So if a message from a free email account says your store is about to be shut down, treat it as a scam and check your admin directly. ## Is Shopify Payments safe? Shopify Payments is safe in the sense that card data stays inside Shopify's PCI-certified system. The risk that sellers actually report is different: Shopify can hold your money for a while. There are two ways this happens. | What happens | Why, per Shopify | What you can do | |---|---|---| | **Account hold**: you cannot receive payouts until it is resolved. Customers can usually still check out. | Missing information, wrong bank details, product eligibility, an unsupported business type, sanctions, creditor or legal action, or a review of high-value goods such as jewelry | Send the requested information and reply to Shopify's email. For a high-value goods review, finish it in the admin or remove those products. | | **Reserve**: part or all of each sale is held for a set period | To cover disputes and refunds. A risk review may look at long delivery times, high chargeback or refund rates, or a sudden jump in sales | Wait for the review before the expiry date. Shopify may lift, keep, reduce or increase the reserve. Money not needed for refunds or disputes is returned. | Reserves come in two forms. A fixed-amount reserve holds a set sum. A percentage-based reserve holds a share of each sale and pays out the rest. The example periods in Shopify's help center are 120 days. None of this is a scam. The processor pays you before the customer's right to dispute the charge ends, and a reserve covers that gap. But it matters for planning. Slow delivery and sudden sales spikes are on Shopify's own list of review factors, so a store that sells preorders or has a viral week should keep enough cash to run without that money for a while. ## Why do some people say Shopify is a scam? Most complaints about Shopify online fall into three groups: - **Shoppers who bought from a bad store.** They blame Shopify because the checkout looked like Shopify's. The store owner is the seller, not Shopify. - **Sellers who had payouts held.** This is real and stressful, but it follows the rules above. It is not theft. - **Sellers who made no sales.** Shopify gives you a store. It does not bring you customers. Many "Shopify is a scam" posts are really "my store did not sell." ## Is a Shopify store safe to buy from? It depends on the store. Shopify is the software, like a website builder. The business that runs the store sets the prices, ships the goods and handles refunds. Shopify's own help center says this plainly. For help with an order, "you need to contact the store directly." The Shop app help center adds that the store you bought from fulfills the order and manages refunds and returns. So a padlock icon and a smooth checkout tell you the payment page is secure. They do not tell you the seller is honest. ## How do I check if a Shopify store is legit? Spend five minutes on these checks before you pay a store you have not used before. | Check | Good sign | Warning sign | |---|---|---| | Price | Close to other sellers | 70% to 90% off a popular brand | | Domain | Matches the brand name; has history | Brand-new domain, odd spelling, extra words | | Contact details | Real address, a working email, a phone number | Only a contact form, or none at all | | Policies | Clear return, refund and shipping pages | Copied text, other store names inside, or missing | | Reviews | Found on Google, Reddit or Trustpilot by searching "store name + reviews" | Only reviews on the store's own pages | | Photos | Original product photos | Same images on many other sites (try a reverse image search) | | Social accounts | Active, with real comments | Dead links or brand-new accounts | | Payment options | Card, PayPal or another method with dispute rights | Bank transfer, gift cards or crypto only | One warning sign is not proof. A new small business can have a new domain. Three or four warning signs together are a reason to buy somewhere else. ## What should I do if a Shopify store scammed me? Shopify's help pages give a clear order of steps: 1. **Check the tracking and contact the carrier.** Some "scams" are lost parcels. 2. **Contact the store directly.** Use the email on your order confirmation. 3. **Contact your bank or payment provider.** They can help you dispute the transaction. Do this early, because card dispute windows are limited. 4. **Report the store to Shopify.** If you suspect fraud, use the fraud report form linked from the Shop help center, or Shopify's "Report a merchant" page. 5. **Report the order after 30 days.** If you have tried the store and it has been at least 30 days with no answer, use Shopify's "Report an issue with an order" form. Use the same email you ordered with. ## When is Shopify a safe choice for your business, and when is it not? Shopify is a sound choice if you want a platform with public filings, independent audit reports, and card security you do not have to manage yourself. Think harder if: - **Your cash flow is tight.** A reserve or hold can lock up money for weeks or months. Plan for it. - **You sell high-value goods such as jewelry or precious metals.** Expect an extra review before payouts. - **Your business model is unusual.** Shopify lists unsupported business types as a reason for a payments hold. Read Shopify Payments' rules for your product before you build. - **You want Shopify to find buyers for you.** It will not. Traffic is your job on any store platform. For what Shopify costs once you are past the trial, see our [Shopify pricing breakdown](./shopify-pricing-2026). ## Where does Runner AI fit for sellers? This section is for sellers only. Runner AI is an AI-native e-commerce platform. You describe your store in chat, and the AI builds the storefront, product pages and checkout. You keep editing by chat or with visual tools. How money moves is the part that relates to this article. On Runner, you connect a payment provider, such as Stripe. The provider's own card fee applies on every plan. Runner then adds its own fee per sale. | Runner plan | Price | Runner fee per sale | |---|---|---| | Free | $0 (publish to a free `runnerai.dev` address, with a watermark) | 5% | | Plus | $25/month | 2% | | Pro | $49/month | 1.5% | | Max | $159/month | 1% | The Free plan publishes your store to a free `runnerai.dev` address, with a Runner watermark. Plus adds your own domain, removes the watermark and keeps one store always on. Annual billing is 20% lower on every paid plan. Full details are on the [Runner pricing page](https://www.runnerai.com/pricing). Runner fits if you want to build a store by describing it instead of setting up themes and apps. It does not fit if your first need is a platform run by a public company with audited results; Shopify is the stronger choice there. Our [Runner AI vs Shopify comparison](./runner-ai-vs-shopify) goes through the trade-offs. ## Frequently Asked Questions ### Is Shopify a real company? Yes. Shopify Inc. trades as SHOP on Nasdaq and the TSX and files quarterly results with the SEC. It reported $3,742 million in revenue for Q3 2026. ### Is it safe to put my card details into a Shopify checkout? The checkout itself runs on Shopify's PCI DSS Level 1 certified system. The risk is the seller, not the form. Check the store first, and pay with a method that lets you dispute the charge. ### Can Shopify hold my money? Yes. Shopify Payments can place an account hold, which stops payouts until an issue is fixed, or a reserve, which holds part or all of your sales for a set period. Shopify's examples use 120 days. ### Does Shopify refund me if a store scams me? Shopify is not the seller and does not handle refunds for stores. Contact the store, then your bank or payment provider. If 30 days pass with no answer, report the order to Shopify. ### How do I know an email is really from Shopify? Shopify sends email from `@shopify.com`, `@email.shopify.com`, `@em.shopify.com` and `@shopify-billpay.melio.com`. Anything from Gmail, Yahoo, Apple Mail or Hotmail is not from Shopify. ## Sources - [Shopify Investor Relations, Stock Information](https://www.shopify.com/investors/stock-information) — listed as NASDAQ:SHOP and TSX:SHOP. Retrieved 2026-11-12. - [Shopify Q3 2026 press release (SEC Form 8-K exhibit)](https://www.sec.gov/Archives/edgar/data/0001594805/000159480526000067/exhibit991pressreleaseq320.htm) — Q3 2026 revenue $3,742 million, GMV $119,145 million. Retrieved 2026-11-12. - [Shopify News, Q3 2026 financial results](https://www.shopify.com/news/shopify-q3-2026-financial-results) — 32% revenue growth, $119 billion GMV, "millions of businesses in 175+ countries," filings on EDGAR and SEDAR+. Retrieved 2026-11-12. - [Shopify Security](https://www.shopify.com/security) — PCI DSS Level 1, SOC 2 Type II and SOC 3 reports, transparency report. Retrieved 2026-11-12. - [Shopify PCI compliance](https://www.shopify.com/pci-compliant) — Level 1 certification extends by default to all stores, covers cart and hosting. Retrieved 2026-11-12. - [Shopify Help Center, Account security](https://help.shopify.com/en/manual/privacy-and-security/account-security) — two-step authentication (required for Shopify Payments), no shared logins, staff accounts. Retrieved 2026-11-12. - [Shopify Help Center, Phishing](https://help.shopify.com/en/manual/privacy-and-security/account-security/phishing) — official sending domains; public email services are not Shopify. Retrieved 2026-11-12. - [Shopify Help Center, Shopify Payments account holds](https://help.shopify.com/en/manual/payments/shopify-payments/account-holds) — reasons for holds, effect on payouts, how to resolve. Retrieved 2026-11-12. - [Shopify Help Center, Reserves in Shopify Payments](https://help.shopify.com/en/manual/payments/shopify-payments/reserves) — reserve types, reasons, 120-day examples, review before expiry. Retrieved 2026-11-12. - [Shopify Help Center, Contacting a Shopify store](https://help.shopify.com/en/manual/fulfillment/managing-orders/contacting-shopify-store) — contact the store directly; 30-day "Report an issue with an order" form. Retrieved 2026-11-12. - [Shop Help Center, Actions for unreceived orders](https://help.shop.app/en/shop/suspected-fraud/actions-for-unreceived-orders) — tracking, contact store, fraud report form, dispute with bank or payment provider. Retrieved 2026-11-12. - [Shop Help Center, Getting help with an order](https://help.shop.app/en/shop/report-issue/getting-help-with-an-order) — the store fulfills the order and manages refunds and returns. Retrieved 2026-11-12. - [Shopify, Report an issue](https://www.shopify.com/legal/report-aup-violation) — "Report a merchant" for policy violations. Retrieved 2026-11-12.