A recent sales popup on Shopify can run entirely on real orders: each popup comes from an order Shopify sent to the app after checkout, with the buyer's first name, city and product, and the real time it happened. Fake orders get in through a handful of specific settings that many popup apps offer, usually switched on to make a quiet store look busy. If you know where those settings are, you can turn them off, or pick an app that does not have them, and still have a popup that works.
This post walks through the usual sources of fake orders, then follows a real one from checkout to the corner of the screen.
Where fake orders come from
Very few store owners set out to fake a sale. Fake orders usually arrive through defaults and "helpful" features:
- Custom or manual notifications. A form with name, city, product and "purchased X minutes ago". Whatever you type is published as a purchase, with the same look as a real one.
- Generated buyers. Some apps fill gaps with names and cities picked from a list, so the popup never runs dry. The products may be yours; the people are not.
- Fresh timestamps on old orders. A real order from three weeks ago shown as "2 minutes ago". The order existed, but the claim that someone just bought is false.
- Looping. The same few orders shown again and again on every page view, each time as if new.
- Product swapping. A real buyer's name paired with whichever product page the visitor is on, so every product appears to be selling.
- Fallback popups. When there are no recent orders, a setting shows "random" or "sample" activity rather than nothing.
Each of these looks harmless in a settings screen. To a shopper who sees the same buyer "just" buying three different products in one visit, they look like what they are. Consumer regulators, including the UK's Competition and Markets Authority, have said that invented popularity can mislead shoppers. We are not lawyers and this is not legal advice, but the safe line is simple: if the order did not happen when and as the popup says, do not show it.
How a real order reaches the popup
The honest path has no human in the middle:
- A customer pays at your Shopify checkout.
- Shopify sends an order webhook to the app's address. The message is signed with a secret that only Shopify and the app know.
- The app checks the signature. If it does not match, the message is thrown away.
- The app stores the order with the time it happened, the first name, the city and the product.
- The widget on your store shows it to later visitors, with its real age.
The signature is the part that matters. It is what lets an app say "this came from Shopify" rather than "someone told us this happened". Our explainer on webhook signing secrets goes into how the check works, and how a verified purchase notification works follows the whole path.
Setting it up on a Shopify store
There are two routes, depending on how the app is installed.
| Route | How orders arrive | What you do |
|---|---|---|
| A Shopify app | The app registers the order webhook when you install it | Install, approve the permissions, place a test order |
| A script tag plus a webhook | You add the order webhook in your Shopify admin and point it at the app | Paste the script in your theme, create the webhook, paste its signing secret into the app |
For the second route, Shopify's admin has a webhooks section under its notification settings in most stores, where you choose the order event, paste the app's address and see the signing key. Admin screens change, so follow your app's docs for the exact clicks.
Either way, finish with a real test order, even a small one you refund. Watch it arrive, check the name and city format, and confirm it shows as verified. If you cannot see a test order arrive, nothing else in the setup can be trusted yet.
Privacy is worth a minute here. A first name and a city is usually enough; a full name is rarely needed. Our post on name and location formats covers the options.