Fake Shopify / BigCommerce e-commerce store subscription payment failed, store suspended, storefront offline, or checkout disabled phishing

Phishing emails impersonating Shopify or BigCommerce claiming the e-commerce store subscription payment has failed, the store has been suspended, the storefront is offline, or checkout is disabled — directing victims to update billing through a credential-harvesting portal. A distinct attack category targeting e-commerce merchants whose entire business revenue depends on store uptime: Shopify is the world's dominant hosted e-commerce platform and BigCommerce is a major enterprise e-commerce platform. Key facts: (1) Shopify serves 4+ million merchants in 175 countries (at $39-$399/month Basic-Advanced, $2,300/month Plus) generating over $200 billion in total merchant revenue — for a merchant doing $10,000/month in sales, a 'Shopify store suspended due to billing failure' email creates an immediate emergency where every hour of suspension means lost sales and potentially lost customers who see a store error page; the payment failure hook is maximally credible because Shopify genuinely suspends stores for failed monthly billing and sends billing failure notifications; (2) The storefront suspension hook exploits a merchant-specific terror: unlike a SaaS tool where suspension affects internal workflows, a Shopify suspension takes the customer-facing storefront completely offline — customers attempting to purchase see an error page; this creates not just revenue loss but brand damage and cart abandonment that affects future conversion rates; (3) Shopify's role as the payment processor for many merchants creates a compounding hook: Shopify Payments (enabled for 90%+ of merchants) means a 'billing failure' email implying both the subscription and payment processing are suspended creates a scenario where the merchant cannot receive money from existing orders either; (4) BigCommerce serves 60,000+ stores including mid-market and enterprise merchants (at $39-$399/month Standard-Pro, custom Enterprise) — BigCommerce's enterprise merchant base means the average compromised credential grants access to larger stores with higher transaction volumes; (5) Shopify and BigCommerce credentials expose the complete merchant business: all customer PII (name, email, shipping address, purchase history for every customer who ever ordered), all payment method partial data, all product catalog and inventory data, all discount codes and promotional configurations, Shopify API keys used in integrations with fulfillment centers, ERP systems, and marketing platforms, and all order history revealing the merchant's complete sales intelligence. Warning signs: sender not shopify.com or bigcommerce.com; genuine Shopify billing at shopify.com/admin/settings/billing; BigCommerce billing at store.mybigcommerce.com/manage/settings/billing.