If your Shopify abandoned cart rate suddenly spikes — or sits at something absurd like 99%+ while sales look fine — you are often not looking at checkout friction. You are looking at abandoned cart bots: scripts that flood Orders → Abandoned checkouts with fake abandoned checkouts that never belonged to a real shopper.
Search the Shopify Community for “fake abandoned checkouts” or “abandoned checkout bots” and you’ll find the same thread structure repeated for years: a merchant posts dozens of checkouts under names like “James James” or “John Smith,” others reply “same thing happening to us,” and the thread runs for months without a real fix. One runs past 120 replies. Another has merchants comparing notes on bots hitting stores for “almost 2 years.”
Card testing gets most of the headlines — bots probing stolen cards at checkout. What shows up just as often, and does quieter damage, is the second-order problem: once fake checkouts pad the list, you lose the one question abandoned checkouts exist to answer — why are real people leaving without buying?
Why your abandoned cart rate spikes when bots hit checkout
Abandonment rate is supposed to be actionable. It goes up, you inspect the checkout flow. It goes down, whatever you changed worked. That only holds if the checkouts in the denominator are real.
One merchant on the Shopify forums put the stakes plainly: “How do you decide where to add marketing dollars if your data is incorrect?”
Another was dealing with north of 2,000 bot-generated abandoned carts a day. Bots reaching checkout, he wrote, were “by far and away, the greatest number” of what showed up in his abandoned checkout list — real customers were the minority. The damage doesn’t stay in one dashboard: a merchant in a separate thread described bots hitting storefront pages, “polluting analytics and funnel data,” then triggering cart events on top of that. Recovery emails fire to junk addresses. Open rates collapse. Sender reputation takes the hit.
At that point, “our abandonment rate is 99.9%” isn’t a number you can act on. The e-commerce average sits around 60%, so 99.9% should be a five-alarm signal that something in checkout is broken — except you have no way to tell whether it is, or whether abandoned cart bots just opened four thousand fake checkouts overnight and the real rate was 60% all along.
You can’t fix real cart abandonment if you can’t isolate it
Cart abandonment has real, fixable causes — surprise shipping costs, forced account creation, a mobile step that times out, a payment method someone expected and didn’t see. Finding which of those is costing you sales means reading the checkouts that abandoned and asking what happened. That only works if those checkouts are people.
When hundreds of abandoned cart notifications come from the same fictitious buyer, or when fourteen arrive in twelve minutes sharing a name pattern, randomized emails from a single domain, and a different IP every time, there’s no browsing behavior to read into. No shipping page they bounced from, no payment step they hesitated on — the “session” was a POST with fields filled from a list. It still sits in the same Abandoned checkouts list as the customer who saw a $14 surprise fee and closed the tab. Once you can’t tell which is which, you can’t build a hypothesis about what to fix.
One merchant watched this for almost two years — bot after bot with the “identical address, just a different name, email” — and got no real fix from Shopify beyond generic advice. Support macros don’t cover “half my abandonment data is fabricated.”
How to stop fake abandoned checkouts (and why usual fixes miss)
Shopify’s June 2026 update cuts bot noise from card-testing sessions — bots that run stolen numbers through checkout without completing an order. That helps for card testing. It does not stop the abandoned cart bots clogging most lists: those never attempt payment at all. They’re built to fire a checkouts/create webhook and stop. Shopify’s filter has nothing to catch, because the pattern doesn’t look like payment fraud.
IP blockers and CAPTCHAs fare worse. Merchants describe bots that enter checkout directly through links instead of browsing in, on “over 18,000 rotating IPs and common browser user agents” — so there’s often no storefront page for a challenge to fire on, and no IP range worth blocking. Deleting fake customers afterward is cleanup, not prevention: the same threads describe attacks that pause and then “come back fairly quickly in waves,” sometimes for years.
Stopping the flood means scoring every checkout when the webhook fires — on signals bots still struggle to fake convincingly: email format and disposability, address verification, missing visitor context a real browser session leaves behind, and request velocity no human matches. Checkouts that score as bots get tagged and kept out of the abandoned-checkout data you use for diagnostics and recovery. What’s left is a list you can trust.
How to get a real abandonment rate
The fix isn’t spotting bots by eye. “John Smith” and a template street address don’t look wrong on a quick scan, and past a handful of checkouts a day manual review fails. Filter bot checkouts first; then the rate — and the individual sessions behind it — become usable again.
That’s what CartWatch does: it scores every checkout in real time, auto-tags likely bots on the Shopify customer record with an audit trail of what tripped the score, and keeps them out of your Klaviyo and Omnisend recovery sends before a single email goes out. If fake abandoned checkouts have made your abandoned cart rate unreadable, install CartWatch from the Shopify App Store and see what’s actually in the list.