If you’ve searched Shopify Community for “James James,” you’ve seen the story: a bot hitting stores since early 2025 with the same fake name, a throwaway Gmail, and a made-up San Antonio address — dumping a dozen or more fake abandoned checkouts a day. One thread runs past 120 replies as merchants compare notes on spam abandoned carts from James James, then Will Will, Tyler Tyler, and other same first-and-last-name pairs.
James James gets searched because the name is obviously fake. When we looked at what CartWatch actually catches across merchants, the real fake-name pattern is bigger — and harder to spot. John Smith, John Doe–style generics, and ordinary American names now fill abandoned checkout lists the same way James James used to.
How to spot fake names in abandoned checkouts
Start with the tells merchants already recognize:
- Same first and last name — James James, Will Will, Tyler Tyler, Ramiro Ramiro. Instant flag.
- Same name, many emails/addresses — dozens of abandoned carts under one name with rotating streets and inboxes (common forum pattern).
- Sequential emails — in one merchant’s data we saw nine bot checkouts back to back, all John Smith, emails
johnsmith001@throughjohnsmith009@on a domain with “bot” in it. A script walking a numbered list. - Shared name pools across unrelated stores — John Jones, Michael Davis, James Brown, Mary Rodriguez showing up shop after shop, plus generic fillers (Robert Davis, William Brown, Jennifer Williams) and weirder variants: reversed pairs (flores mitchell, rodriguez lee) and near-miss typos (Carolyn Myerse, Sean Evanso, Ashley Diazn).
Those patterns identify a lot of checkout spam on sight. The problem is what comes next.
Why John Smith is harder than James James
James James is a gift — nobody is named that. John Smith (and John Doe) is not. It’s one of the most common names in English. A merchant scanning Abandoned checkouts won’t flag it; on its own it looks like a real customer.
That’s the shift in fake abandoned checkouts: the fake-name problem isn’t “spot the gibberish” anymore. Bots draw from ordinary first/last name generators — the same libraries used for test data — so the name field stops being a reliable signal. You can’t eyeball your way out of John Smith or Michael Davis the way you can with James James.
What still doesn’t fake easily is everything around the name: sequential or pattern-based emails (johnsmith001@, firstname.lastname plus a random three-digit suffix), disposable or bot-flagged domains, an address that doesn’t verify, a checkout with none of the browse history a real session leaves, and request velocity no human matches. Those signals hold when the name looks boring and plausible.
Why fake-name bots are worth catching
This isn’t cosmetic. Every one of those checkouts is a webhook your store processes, a row in Abandoned checkouts, a recovery email to nobody, and — if the checkout opts into marketing, which bots often do on purpose — a dead contact in Klaviyo or Omnisend dragging down sender reputation. Bad-bot traffic is a large share of web traffic; Shopify checkouts get a disproportionate cut because an abandoned or completed checkout is valuable to fake.
Merchants asking “should I be concerned?” about fake names in abandoned carts are right to worry about list quality and analytics — not because one James James is scary, but because the quieter John Smiths never stop.
How to catch bots the name won’t reveal
CartWatch doesn’t score a checkout on whether the name “looks fake.” It scores every checkout on signals that don’t fake convincingly — email format and disposability, address verification, missing visitor context, request velocity, and a merchant-specific history of values seen on confirmed bots. When a checkout crosses the threshold, the Shopify customer gets auto-tagged and the contact is suppressed from Klaviyo and Omnisend before a send, and the checkout is listed in your dashboard with its risk level and the actions taken.
Your next John Smith won’t announce itself like James James did. Install CartWatch from the Shopify App Store and see what’s actually in the list.