Someone copied my Shopify store: what to do

two identical browser window cards side by side, the one behind slightly faded, with a small warning shield between them

If someone copied my Shopify store is the sentence you just typed into Google, the useful answer is that only some of what they took is actionable. Your photographs and your original written descriptions are protected by copyright. Your store name and logo are trademark territory, which is a different process. Your layout, your colour scheme, your niche and your product selection are, in most cases, nothing you can act on at all.

Sorting the copy into those three buckets before you do anything else saves you a fortnight of frustration. Then the work is unglamorous and effective: evidence, notices to hosts, and hardening the assets that keep getting taken.

Not legal advice, and if the clone is trading at real volume under a confusingly similar name, that is a conversation with an actual lawyer.

In this post

Screenshot everything first

Before you email anyone, capture the evidence. The moment a notice lands, pages disappear, and a takedown you cannot document is a takedown you cannot repeat when the clone reappears on a new domain in November.

Capture, for each copied page: the full page screenshot with the URL bar visible, the page URL, today’s date, and the image URL of any photo of yours they are using. Save your matching original URLs beside them. If you can, note whether they hotlinked your file or re-uploaded a copy, because the first one is easier to prove and easier to break.

Then find your own timeline: when you published, when the shoot happened, invoices, raw files with capture dates. Google’s About this image panel can help here, since it shows when Google may have first seen a version of an image and flags pages where it appeared earlier than others.

What you can actually act on

What they tookProtected?Route
Your product photographsYes, copyright, from the moment you shot themCopyright notice to the host
Your product descriptions, word for wordYes, if they are your original writingSame notice, same form
Your store name or logoTrademark territory, not copyrightA separate trademark form, and usually legal advice
Supplier or manufacturer photos you both useNot yours to enforceNone. Ask the brand owner
Your theme, layout or colour paletteAlmost neverNone worth pursuing
Your niche, product mix or pricingNoNone. This is competition

Two nuances that decide real cases. First, you can only enforce what you own: if a freelance photographer shot your catalog and never signed an assignment, the copyright is theirs, not yours, and the notice has to come from them. That is covered in who owns your Shopify product photos, and it is the most common reason a merchant’s takedown stalls.

Second, copied descriptions are only protected where they are genuinely your writing. A spec list of dimensions and materials is thin ground. Three paragraphs of your voice, lifted verbatim including your typo, is not.

Working out who and where they are

You do not need their name. You need their host, because that is who acts.

  • Another Shopify store? Often obvious from the URL structure or the checkout. Report through shopify.com/legal/tools/report-an-issue/dmca, and note that trademark and trade dress use a different form.
  • Behind Cloudflare? Cloudflare says plainly that it “does not host content” and “cannot remove content from the Internet that we do not host”, but it will forward your complaint to the website operator and the hosting provider. That forwarding is the point: it identifies the real host.
  • A US service provider you cannot identify? Every one of them must register a designated agent with the Copyright Office, and the directory is public at copyright.gov/dmca-directory. Designations expire after three years, so use the directory rather than an address from an old forum thread.
  • A marketplace listing? Etsy, Amazon and eBay each run their own IP portals, and the marketplace route is usually faster than chasing a host.

While you are looking, check how far it spread. The src: operator in Google Images, followed by your image URL, lists pages referencing that exact file, and TinEye or Yandex will surface re-uploaded and recropped copies. The full sweep is in how to find your stolen product photos.

Sending the notices

A copyright notice needs six specific elements, and missing one makes it legally invisible: a notice that does not substantially comply “shall not be considered” in deciding whether the host had knowledge. You do not need a copyright registration to send one, though you do need one to sue.

Three things to brace for. Several platforms forward your notice, including your name and contact details, to the person you reported, so use a business address and a role email. A knowingly false notice creates liability under section 512(f) for the other side’s damages and legal fees. And if they file a counter notice, the material goes back up 10 to 14 business days later unless you notify the host that you have filed a court action, which is the point where an unregistered copyright leaves you with nothing to escalate to.

The template, the six elements and the reporting URLs for ten platforms are all in the DMCA takedown guide. Send to the host first. Removing the page from Google Search only removes the traffic, not the copy.

Hardening what keeps getting taken

Here is the thing about clones: they come back. Different domain, same photos, because your photos are the part that took real money to make and costs them nothing to take.

And your store publishes them. The Shopify CDN serves full resolution originals to any request, with no referrer checking and no signed URLs, which we confirmed with live tests while researching right click blocking on Shopify. Your products.json endpoint and image sitemap list the URLs. That is normal for ecommerce, and it is not something you can turn off.

What you can change is what a stolen file says about itself. A mark carrying your business name turns every lazy copy into an advert for you, and in the US that mark can count as copyright management information, where removal carries separate statutory damages of $2,500 to $25,000 per violation under section 1203. Across a catalog that means bulk: Viking Watermark stamps your logo across a collection or the whole catalog and blocks right click, copy and drag save, keeping originals in Shopify Files for a one click restore. Free for the first 100 images, $5 a month above that, 5.0 stars from 6 reviews, a new listing rather than a proven one.

Bulk applying a store logo watermark across a whole Shopify catalog by collection or tag

Then the cheap habits that pay off later: distinctive filenames built at upload with the free bulk image renamer, since Shopify locks the filename in and you cannot rename it afterwards, and an exported archive of originals so you can always prove what you published and when. Copyright registration on your best work is what turns a notice into something with consequences.

What not to waste time on

  • Blocking text selection to protect descriptions. Scrapers never run your JavaScript. You will annoy shoppers and stop nobody.
  • Chasing a layout. They bought the same theme. So did forty thousand other stores.
  • Public callouts. Satisfying, occasionally effective, and a good way to send a copycat free traffic and to say something defamatory in public.
  • A threatening letter you wrote yourself. A clean host notice does more, faster, and does not expose you to a false claim under section 512(f).
  • Paid monitoring, before you check the fit. One of the biggest services tells you in its own help centre that its legal partners will likely not take on cases where the site sits on a hosted platform such as Shopify, or where the store sells photo based products.

The part nobody wants to hear

Being copied is a signal that something you built is working. That is genuinely small comfort at 11pm when you are looking at your own photos on someone else’s domain, and it is also true.

The stores that survive this do not win on enforcement. They win because the copy is always a season behind: yesterday’s photos, last month’s range, none of the reviews, none of the support, none of the reason a returning customer comes back. Enforcement raises the copycat’s costs. Your release cadence is what makes copying pointless.

So do both. Send the notices, mark the photos, register the best work, then go back to shipping. And while you are in the catalog, the two structural things that make a store look more finished than a clone ever does: the right photo appearing when a shopper picks a colour, which is variant image filtering, and one tidy product card instead of six near identical ones, which is what combined listings with collection swatches do. Run the product page grader over your top sellers while you are there.

FAQ

Is it illegal for someone to copy my Shopify store?

Parts of it. Copying your photographs or your original written descriptions infringes copyright. Copying your name or logo is a trademark question. Copying your layout, niche, pricing or product selection is generally lawful competition, however unpleasant it feels.

How do I report a store that copied mine?

File with whoever hosts them. For another Shopify store that is the copyright report form at shopify.com/legal/tools/report-an-issue/dmca, which needs page level URLs. For a site behind Cloudflare, the abuse form forwards your complaint to the real host.

Do I need a lawyer?

Not for takedown notices, which are designed to be sent by rights owners themselves and need no registration. You want one if the clone trades under a confusingly similar name, if they file a counter notice, or if the money involved justifies a court action.

They are using my photos but changed my text. Does that matter?

No, the photos are enough on their own. Each photograph is a separate work, and using it without permission is infringement regardless of what surrounds it. Cropping or resizing does not fix it for them either.

Can I stop them hotlinking images from my store?

Not on the Shopify CDN. There is no hotlink protection, no referrer checking and no signed URLs for storefront product images, and Shopify staff have confirmed it is not supported. A takedown notice to their host is the route.

Should I watermark everything to stop this happening again?

Mark the gallery images, not the primary one, because your feed image needs to stay clean for Google Shopping. Put your business name in the mark rather than a generic symbol, since a mark identifying the owner can carry separate legal weight in the US.

Take the screenshots today. Send one notice to the host this week. Then mark your gallery images so the next clone does the advertising for you.

Co-Founder at Craftshift