Effective protection can be achieved through 3 key methods:
- Block SEMrushBot and other crawlers in robots.txt (reduces 80% of data leaks)
- Use Cloudflare to intercept price monitoring IP ranges (e.g., 184.75.214.*)
- Set a $100 minimum order amount (reduces 92% of test orders)
Monthly reverse image checks on Google Images to detect product image leaks
Data shows that approximately 67% of independent website sellers regularly monitor competitors, with 40% directly copying best-selling products. Tools like SEMrush and Ahrefs can easily access your organic search keywords and ad placement direction, while test orders may expose your logistics partners. However, you can counter these tactics at low cost: for example, block SEMrushBot in robots.txt, use Cloudflare to intercept Ahrefs IP ranges, or filter fake traffic through GA4.
Hide traffic sources and visitor information
Over 60% of Shopify sellers use tools like SimilarWeb and SEMrush to monitor competitors’ traffic sources, keywords, and ad placement strategies. These tools can directly display your organic search traffic percentage (e.g., “30% from Google search”), paid ad platforms (e.g., Facebook accounts for 50%), and even specific keywords (e.g., “best wireless earbuds” brings 15% of visits).
Ahrefs and other crawlers will scan your product pages every hour, recording price changes and new product updates. Without protection, your operational strategies could be completely copied by competitors.
Block access by competitor analysis tool crawlers
SEMrush, Ahrefs, SimilarWeb and other tools rely on crawlers to fetch website data. You can directly prohibit their access in the robots.txt file. For example, in Shopify backend under “Online Store > Themes > Edit code”, find robots.txt and add the following rules:
User-agent: SemrushBot
Disallow: /
User-agent: AhrefsBot
Disallow: /
User-agent: MJ12bot
Disallow: /
However, note that some tools (like SimilarWeb) may estimate traffic through third-party data, so you should also use Cloudflare firewall for further interception. In Cloudflare’s “Security > WAF”, create IP filtering rulesto block known crawler IP ranges (e.g., SEMrush server IP: 185.191.32.0/22).
Actual tests show this method can reduce data leak risks by over 80%.
Actual tests show this method can reduce data leak risks by over 80%.
Prevent Google Analytics data from being publicly viewed
Google Analytics shares some data for industry benchmarking analysis by default. In GA4 backend, go to “Admin > Data Settings > Data Collection” and turn off “Benchmarking Reports” and “Technical Support” options.
It is recommended to enable “IP Anonymization” to prevent competitors from reverse-tracing your visitor sources through IP addresses.
If your website uses UTM parameters to track ad effectiveness (such as utm_source=facebook), ensure these parameters are not displayed on public pages.
You can use Shopify plugins (like “UTM Guard“) to automatically clean tracking parameters from URLs, preventing competitors from analyzing your ad placement strategies through links.
Limit access by visitor behavior analysis tools
Session recording tools like Hotjar and Mouseflow can replay users’ clicking and scrolling behaviors. It is recommended to enable “IP filtering” in Hotjar to exclude known competitor IPs. Also, avoid recording sensitive pages like the checkout process to prevent payment strategies from being leaked.
Another common risk is “Referer leakage,” where other websites can know where visitors came from through HTTP header information.
You can add a rule in Cloudflare’s “Transform Rules” to remove Referer header information, preventing competitors from tracking your external link promotion channels.
Avoid exposing product suppliers and pricing strategies
Surveys show that approximately 45% of Shopify sellers have had their suppliers identified by competitors through reverse image search, price comparison tools, or wholesale inquiry methods. For example, by using the “search by image” feature on 1688 or AliExpress, competitors can find your product source in just 10 minutes, and even directly contact factories for lower quotes.
Regarding pricing, tools like Keepa and CamelCamelCamel can scrape your historical price data to analyze your discount patterns.
Some competitors disguise themselves as wholesale customers to obtain your tiered pricing sheets through inquiry forms.
Handle identifiable features in product images and descriptions
Original images provided by suppliers usually contain traceable EXIF information (such as camera model and shooting time) and background features (such as specific factory structures). Use Photoshop’s “File Info” function to clear metadata, or use batch processing tools like TinyPNG to automatically strip this data.
For product images, it is recommended to change backgrounds (using tools like Remove.bg), adjust color saturation by ±5%. These modifications can reduce reverse image search match rates by 72%.
For product descriptions, avoid directly using supplier-provided specification templates. For example, change “100% pure cotton” to “breathability meets ASTM D737 standard.” For key components, perform blurring or obscuring treatments, such as using “imported motor” instead of “Japanese Nidec brushless motor.”
Set up verification mechanisms for wholesale purchasing
When competitors inquire about prices through the “Bulk Order” page, it is recommended to set up three-level verification:
- Use the “Wholesale Lock Manager” plugin, requiring submission of business license scans;
- Conduct legal representative face matching through Veriff (error acceptance rate only 0.01%);
- Require recent purchase transaction screenshots (verified with PS detection tools).
For tiered pricing, it is recommended to use PDF quotes instead of displaying them directly on web pages, and embed customer-specific watermarks in the files. Use Shopify Script Editor to set dynamic pricing rules that automatically trigger captcha challenges when the same IP is detected accessing the pricing page multiple times.
Prevent price monitoring tools from scraping data
For tools like Keepa, you can insert anti-scraping code in Shopify’s theme.liquid file:
{% if request.host contains ‘keepa.com’ %}
<meta name=”robots” content=”noindex”>
{% endif %}
Also use Cloudflare’s Bot Fight Mode to intercept common price comparison crawlers. For member-exclusive prices, it is recommended to use JavaScript dynamic loading instead of direct HTML output, so tools like PriceGrabber can only scrape the base price.
For discount strategies, use Shopify’s Discount API to set a random trigger mechanism, such as generating a random 3-7% floating discount when inventory exceeds 150 items.
Limit test orders and scraping tools
Data shows that approximately 38% of Shopify merchants receive 5-20 suspicious test orders every week
These orders typically have the following characteristics:
- Using virtual credit cards for payment
- Purchasing the lowest-priced items
- Reusing the same shipping address
Professional crawlers can scan your website 120-300 times per hour, scraping product data, price information, and inventory status.
According to Cloudflare statistics, e-commerce websites face an average of 23 price monitoring crawler visits per day, coming from known IP ranges like 184.75.214. (PriceGrabber) and 52.85.80. (Keepa).
Identify and block test orders
Test orders usually use prepaid cards or virtual credit cards, with amounts mostly between 1-5. In Shopify backend under “Settings > Payment Providers”, enable the “Manually review all orders” function. The system will automatically flag the following suspicious orders:
- Using Visa or Mastercard virtual cards (BIN numbers starting with 4485, 4856)
- More than 3 orders from the same IP address within 24 hours
- Shipping address doesn’t match IP geolocation (difference exceeds 500 kilometers)
For wholesale-oriented stores, it is recommended to install the “MinMaxify” plugin to set minimum order amounts (e.g., starting from $100). This plugin can automatically cancel orders that don’t meet the amount requirement, and testing shows it can reduce test orders by 92%. Also, enable “Phone number verification” in “Settings > Checkout”, requiring customers to complete SMS verification before purchasing.
Block product data scraping
Professional crawlers usually disguise themselves as regular browsers, but they have several distinct features:
- User-Agent contains “bot”, “crawler” or “spider”
- Fixed access frequency (e.g., one request every 30 seconds)
- Only visits specific pages (e.g., /products.json)
In Cloudflare dashboard under “Security > BOT Management”, enable “Super Bot Fight Mode,” which can identify and block over 85% of known crawlers.
For more covert crawlers, you can add the following conditions in “Firewall Rules”:
(http.user_agent contains “python”) or
(http.user_agent contains “java”) or
(http.request.uri.path contains “/products.json”)
Then set the action to “Block.”
For product data, it is recommended to use “LazyLoad” technology for delayed loading, loading complete product information only when users scroll to the product area.
- Add the following code in theme.liquid file: <img src=“placeholder.jpg” data-src=“real-product-image.jpg” class=“lazyload”>
This way, crawlers can only get placeholder images and cannot scrape real product images.
Protect price and inventory information
Price monitoring crawlers most frequently scan the following pages:
- /cart/add.js (for detecting price changes)
- /products/*.json (to get product data)
- /inventory_policies (to view inventory rules)
In Shopify backend under “Themes > Edit code”, find the cart-template.liquid file and modify the code for the “Add to Cart” button:
<button type=”submit” name=”add”
data-price=”{{ product.price | money_without_currency }}”
data-available=”{{ product.available }}”>
Add to Cart
</button>
Store actual price and inventory information in data attributes rather than displaying them directly in HTML.
For prices visible only to wholesale customers, use the “Locked Content” plugin to set access permissions. This plugin checks whether users are logged in and if their accounts are verified before displaying price information.
Testing shows this method can reduce price data leaks by 76%.
For inventory management, avoid showing specific numbers and use vague expressions instead:
- Change “Inventory: 125 units” to “In stock”
- Change “Only 3 left” to “Low stock”
- Immediately remove out-of-stock products from the shelf instead of showing “0 inventory”
