Frequently Asked Questions

Browsify is an all-in-one fraud prevention and bot protection app for Shopify stores. It installs in 1 click and automatically blocks fake orders, card testing, malicious bots, VPN/proxy connections, DevTools inspection, and content theft in real time using persistent Visitor ID fingerprinting, multi-signal RiskScore, and customizable block rules.

Install Browsify free from the Shopify App Store. The Starter plan includes 3,000 requests a month and shows every threat on your store. To block high-risk visitors, VPN traffic and fraud automatically, upgrade to Growth, Professional or Enterprise anytime from inside the app.

Browsify evaluates multi-signal telemetry (device hardware fingerprint, browser integrity, proxy/VPN status, and behavior patterns) in under 5ms before bad traffic reaches checkout. Genuine shoppers experience zero latency, while automated scrapers, carding bots, and repeat fraudsters are blocked or redirected per your store's rules.

You stay in control. Every blocked visit appears in Visitor Analytics, and you can unblock any visitor to add them to your allowlist. You can also choose from 3 protection levels (Essential, Enhanced, Maximum) and adjust your risk score threshold.

No. Browsify runs through a lightweight theme app embed (about 15KB) that doesn't affect your store's speed or appearance and works with any theme.

Visitor ID is a unique device identifier that stays the same even when a visitor changes their IP, uses a VPN, or clears cookies. Unlike IP blocking (which only blocks one connection), Visitor ID recognizes the actual device, so the same bad actor can't come back with a new IP. Think of it this way: an IP address is like a phone number, easy to change. A Visitor ID is like a fingerprint, it stays with you.

No. Incognito mode and cookie clearing don't affect Visitor ID, it's based on the device itself, not on stored data. Even switching browsers or using private browsing won't change the identifier.

Yes. A VPN only changes the IP address, it does not change anything about the device or browser. Browsify's Visitor ID tracks the device, not the connection. So even if someone switches between 10 different VPN servers, their Visitor ID remains the same, and Browsify recognizes them every time.

Browsify analyzes multiple signals for every visitor: their Visitor ID (device fingerprint), IP address, location, VPN/proxy usage, browsing behavior, and order patterns like multiple card attempts or billing/shipping mismatches. All these signals are combined into a risk score from 0 to 100 that tells you how likely the visitor is to be fraudulent.

The risk score goes from 0 to 100. Scores 0-33 are Low Risk (green), these orders are almost always safe. Scores 34-66 are Medium Risk (yellow), worth a quick look but often legitimate. Scores 67-100 are High Risk (red), multiple red flags are present and the order should be reviewed carefully or blocked automatically.

Common risk factors include: multiple card attempts (someone tried several different cards), card country mismatch (card from one country, visitor from another), VPN or proxy detected, known fraud device (this Visitor ID has been linked to fraud before), TOR network usage, mismatched billing and shipping addresses, and disposable email addresses. No single factor determines the score, it's the combination that matters.

The dashboard shows flagged visitors with their Visitor ID, risk score, and specific risk factors. You can see a country breakdown (where suspicious traffic comes from), a timeline view (when fraud attempts happen, often at 2-5 AM), and detailed session data for each flagged visitor. Each risk factor is explained in plain language so you know exactly what triggered the flag.

No, about 31% of internet users use VPNs for legitimate reasons (privacy, work, travel). Blocking all VPN traffic means losing real customers. Instead, use smart blocking: block TOR traffic entirely (almost never legitimate shopping), block datacenter proxies (used by bots, not shoppers), allow iCloud Private Relay (used by millions of Apple users), and combine VPN detection with risk scoring so VPN users with no other red flags can still purchase.

VPN ($3-$12/month) encrypts all your traffic and routes it through another server, used by millions of regular people for privacy. Proxy (often free or pennies per IP) is a simpler middleman server, datacenter proxies are very suspicious, residential proxies are harder to detect. TOR (free) bounces traffic through multiple random computers worldwide for maximum anonymity, almost no legitimate shopper uses TOR to buy products.

Not if you configure it correctly. Apple's iCloud Private Relay (used by iCloud+ subscribers on iPhone, iPad, and Mac) looks like a proxy to detection systems. Browsify recognizes iCloud Private Relay separately and always allows it through, so your Apple customers are never blocked.

You set a risk score threshold (default is 80 out of 100). Every visitor to your store is scored in real time. Anyone above your threshold is automatically blocked before they can checkout, no manual review needed. You can also set up auto-cancellation for orders that slip through with high risk scores. Both features work 24/7, even while you sleep.

Block shows the visitor an 'access denied' page, the door is shut. Use it for known bad actors and very high-risk visitors. Redirect sends them to a different URL (like a verification page or 'contact us' page). Use it for borderline cases where you want to add friction without completely shutting someone out. Think of it as: Block = locked door, Redirect = detour.

If a real customer contacts you saying they can't access your store, look up their Visitor ID in your Browsify dashboard, check why they were blocked, and if they're legitimate, add them to your whitelist. They'll never be blocked again. To minimize false positives, start with a high threshold (90+) and lower it gradually as you monitor the results.

It depends on what you sell. High-value items ($200+): lower to 60-70 because one chargeback hurts a lot. Low-value items ($10-$30): keep at 80-85 since blocking too many customers costs more than occasional fraud. Digital goods: lower to 50-60 because they're the #1 fraud target with instant delivery and no shipping proof.

Content Protection stops people from easily copying your product photos and descriptions. It turns off right-click (so they can't 'Save Image As'), blocks text selection and copying (so they can't grab your product descriptions), and disables the keyboard shortcuts tech-savvy users rely on to view or copy your page code (like F12 and Ctrl+U). It stops 95% of casual content theft.

For 95% of visitors, it's completely invisible, most people never right-click or press F12 on a product page. We recommend enabling it selectively: turn it on for product pages (where your valuable content lives) and leave it off for blog posts, FAQ pages, and informational pages where customers might legitimately want to copy text like your return policy.

Browsify organizes web crawlers and automated bots into 5 pre-built groups: Search Engine Crawlers (Googlebot, Bingbot, Baiduspider), AI Model Training (GPTBot, ClaudeBot, CCBot, Bytespider, Amazonbot), Realtime AI Search (Applebot, OAI-SearchBot, PerplexityBot), AI Assistants (ChatGPT-User, DuckAssistBot, Manus), and Web Archivers (Archive.org, Arquivo.pt). You can toggle each group on or off with a single switch.

Yes, absolutely! Because Browsify separates Search Engine Crawlers from AI Model Training bots, you can keep Googlebot and Bingbot fully allowed (Recommended for SEO) while completely blocking GPTBot, ClaudeBot, Bytespider, and other unauthorized scrapers from stealing your product catalog and photos.

Yes. Every plan, from the free Starter plan up to Enterprise, includes all 5 bot access categories with instant 1-click toggling.

Starter is free forever and shows every threat on your store: 3,000 requests per month, up to 5 custom block rules, the full dashboard and real-time analytics, device fingerprint and risk score (view only), VPN, proxy & Tor detection tags, AI & known bot blocking, F12 (DevTools) blocking, and a weekly email report. Growth and above add auto-blocking by risk score, VPN, proxy & Tor auto-blocking, fraud auto-block at checkout, geographic blocking, and right-click & copy protection.

Browsify offers 4 tiers: Starter (free forever, 3,000 requests/mo, 5 rules), Growth ($9.99/mo, 50,000 requests/mo, 100 rules), Professional ($49/mo, 250,000 requests/mo, 500 rules), and Enterprise ($299/mo, unlimited requests, 1,000 rules). Paid plans are billed monthly through Shopify.

Your store stays open in safe fallback mode. Browsify stops screening new visitors, but your existing blocking rules keep working. You'll get email and Shopify notifications at 80%, 95% and 100% of your limit.

Upgrade to Growth, Professional or Enterprise anytime from inside the Browsify app. Billing runs through Shopify, and you can upgrade or downgrade anytime.

If your store uses an AI chatbot (Tidio, Gorgias AI, ChatGPT widget, etc.), bots and bad actors can spam your chat to drain your AI tokens, costing you real money. They can also extract product info, pricing logic, and internal data through chat. Browsify blocks these bots before they reach your chatbot.

Browsify uses Visitor ID fingerprinting and behavior analysis to detect chat-spamming bots. Automated visitors, repeated chat sessions from the same device, and known bot patterns are blocked before they can send messages to your AI chatbot, so your tokens are only spent on real customers.

Browsify works with any chat widget on your Shopify store, including Tidio, Gorgias AI, Intercom, Zendesk AI, ChatGPT-based widgets, and custom chat solutions. Because Browsify identifies and blocks automated bots at the storefront entrance before they interact with widgets, your AI tokens are protected regardless of which chat tool you use.

Browsify focuses on anonymous identifiers like Visitor IDs and IP addresses, not personal customer data. It complies with Shopify's privacy guidelines and follows industry-standard security practices. We do not sell or rent any data to third parties.

Any fraud detection system can have false positives, but Browsify minimizes them through multi-signal risk scoring (no single factor triggers a block). If someone is blocked incorrectly, you can whitelist their Visitor ID or IP address instantly. You can also increase your risk score threshold to reduce sensitivity, or set borderline cases to 'flag for review' instead of auto-block.

Go to the Configuration section in your Browsify dashboard, find the customer's IP or Visitor ID in your block list, and remove it. You can also add them to a whitelist so they're never blocked again, regardless of their risk score.