Block a specific Shopify customer account

Updated · 3 min read

Every merchant tries this first: open the customer record, look for the switch that ends it. Depending on which version of customer accounts your store uses, you may find an option to disable the account, or nothing beyond deleting the record. Either way, nothing is blocked.

Shopify checkout is designed to accept guests. Sign-in is a convenience, not a gate. The person whose account you deleted can reach checkout, type the same email and the same address, and pay.

What each action actually does

What you do in adminWhat happens
Disable the accountThey lose the signed-in experience. Guest checkout still works
Delete the customerYou lose the order history. Guest checkout still works
Cancel and refund the orderReactive, fees often already spent, and they know they were caught
Tag the customerNothing alone — powerful once a checkout rule reads the tag
Block the account with a checkout ruleSigned-in checkouts for that customer are refused before payment

Block a specific account

  1. Find the customer in Shopify admin and confirm it is the right record by their order history.
  2. In Chargeback Blacklist, add a rule of type Customer account and select them. The rule points at the record, so it survives them changing the name or email on the account.
  3. Add rules for the email, phone and address from their past orders. This is the step people skip, and the reason a "blocked" customer sometimes still gets through.
  4. Beyond a handful of accounts, switch to a customer tag rule.

Block the account, the email, the phone and the address together, and the guest-checkout escape route closes.

Install Chargeback Blacklist

The guest-checkout retry

Expect it: they sign out, use a new email and order as a guest. Your raw detail rules catch the reused fields, and the automatic device ban catches the rest — once one of their checkouts is blocked, the device fingerprint and IP address behind it are banned, so changing every identifier does not help them.

Accounts created by people already known elsewhere

A brand new account has no history with you at all. The community blacklist checks the email or phone against reports from other stores, with a threshold you set, so the signup that looks clean to you is not necessarily clean.

Wholesale and B2B stores

If every buyer signs in, the account is the identity and account blocking becomes your main tool. Two extras: companies buy under several contacts, so blocking one account may leave colleagues able to order, and the delivery address is usually a shared warehouse — which makes an address rule the natural complement when you want to stop the business rather than a person.

On a normal retail store most orders are guest checkouts, so treat account rules as a layer and let email, phone and address do the work.

FAQ

Does disabling a Shopify customer account stop them ordering?
No. Shopify checkout accepts guests, so a person whose account is disabled or deleted can order again a minute later without signing in.
What does blocking a customer account do?
It stops checkouts matched to that specific customer record, which is the right tool when your store requires customers to be signed in, such as wholesale or B2B.
Should I delete the customer instead?
No. Deleting removes your own order history and evidence while leaving them free to check out as a guest.
Can I stop someone creating a new account?
Shopify has no setting for it, and it would not help, because checkout does not require an account. Block the email, phone and address instead.