On 2026-09-24 a dropshipper wrote in r/dropshipping: "Running a small dropshipping business with 4 Shopify stores across different markets and geos. My shops started to get hit with check after check on account logins and Meta Business Manager keeps flagging my ad accounts. I think it links everything back through the store connections." They were on ISP proxies, said the "IPs get flagged", and were shopping for mobile ones.
We read ten posts like it from store owners, going back to 2022. We sell proxies, so here is the awkward part first: in most of these cases the address is not what decides the outcome.
Four stores, login checks and flagged ad accounts: what links them
Stores and ad accounts get linked through what they share, meaning the people and business behind them, the cards, the Business Manager, the pixels and the domains, while a proxy changes only the address an admin logs in from.
The poster's guess is closer than they may think. Shopify's setup page for its Facebook & Instagram app says it connects a store to a Meta business portfolio (Business Manager, under its newer name), a Facebook Page, an Instagram account and, for some features, an ad account. Four stores wired into one Business Manager are linked in Meta's own records. No IP needed. Mobile proxies would change the type of address and nothing else.
"I'm sure the rest of my setup is fine" is the sentence we'd question first. One card on several ad accounts? One admin profile on every store? A pixel reused between shops? Our piece on which part of a Meta ban was the IP walks through those signals, and most never touch the network.
The IP does matter for logins. An admin that signs in from a new address every session looks like a leaked password. Give each store admin one static address, keep it for months, and turn on two-step authentication (Shopify supports authenticator apps, security keys and SMS codes). Our static ISP addresses are dedicated, about EUR 1.10 to 1.40 per IP per month, minimum 10. A residential sticky session holds an address for 5 minutes up to an hour. Fine for a task. Wrong for an admin that should look the same next Tuesday.
If an address "gets flagged", check it with the free IP fraud score tool first. A clean static address keeps logins quiet. It will not unlink a Business Manager.
Running US-market stores from Europe: you don't need a US address
You can run a Shopify store for US buyers and show Meta ads to Americans from Europe, because neither platform asks the merchant to live where the customers are, and payments depend on where the business is registered.
On 2026-04-06 someone asked in r/dropshipping: "I plan to run some Shopify stores for US market, run Facebook ads as well. ... Proxies are not that cheap, can I run with VPN instead? ... I reside in Europe."
For the store, neither. Shopify's Terms of Service (last updated August 1, 2026) say: "You must maintain an accurate location in the administrative console of your Shopify Store." A US login address doesn't make the business American. It just contradicts the location you declared.
Payments follow the business. Shopify's help center: "You can use Shopify Payments to accept payments at checkout if your business is located in one of the supported countries." That list covers most of the EU plus the UK, Norway and Switzerland, and verification may ask for "personal identification, proof of address, and business registration documents." Documents, not addresses.
For ads, Meta's targeting documentation describes location as country codes for the audience, based on people's "home" or "recent" location. Where that page brings up the advertiser's own base, it's about housing, employment, credit, social issue, election and political ads. A store selling phone cases runs none of those. And a commercial VPN exit is shared with thousands of strangers. Log in from your own connection.
After a termination or a payout hold, a new address changes nothing
A new IP doesn't help after Shopify terminates a store or holds payouts, because the decision is tied to the person, the business, the bank and the payment details, none of which change with the connection.
On 2024-09-14 a poster in r/shopify said Shopify held their payouts for 120 days after the supplier's tracking stalled, then shut the account. They asked: "if I make a new Shopify under a family members name and add a proxy like Nordvpn would my account get banned still?" On 2024-04-10 another, in r/dropshipping, had every store terminated, each registered "utilizing either my dad's or mom's SSN", and then the replacements: "I have tried using anti-detect browsers ... and various proxies. I've even attempted spoofing my device's specifications and location, but no luck."
The second post answers the first. So, plainly, and without judging anyone who got here through a bad supplier: opening a store under a relative's name or SSN to get around a termination is against Shopify's terms, and we don't help with it. Shopify asks for "your full legal name, business address, phone number, a valid email address" at signup, and its terms name a Store Owner who "is responsible for the Account, is bound by these Terms of Service". Put a store in a parent's name and the parent carries its chargebacks.
The held money has a real exit, slow as it is. Shopify's reserves page describes a reserve as a hold on "a portion, in some cases a full amount, of transactions" and lists elevated chargebacks, rising refunds and long delivery timelines among the reasons. Stalled tracking feeds exactly that risk. The page also says that at the end of the period, funds "no longer required to address future refunds or disputes are returned in full." Answer Shopify, fix the supplier, wait.
On 2023-02-09 a poster in r/shopify asked: "I got banned for 4.4, I wonder if that means they banned my IP?" We looked it up. In the Shopify terms in force then (last updated September 6, 2022), section 4.4 read: "You may not use the Shopify Services for any illegal or unauthorized purpose nor may you, in the use of the Service, violate any laws in your jurisdiction (including but not limited to copyright laws)". That's about what the store sold or did, and it says nothing about IP addresses. Today's terms are numbered differently, so read the clause your own notice names.
Orders flagged for a proxy: weak evidence on its own
A proxy flag on an order is one indicator among several, and Shopify's help page says it outright: "An IP address or location description by itself isn't a fraud recommendation."
On 2024-01-03 a poster in r/shopify described a high-risk order: "the first credit card was declined but the second one went through. The second fraud analysis was that web proxy was used to place the order." On 2022-08-19, in r/dropship: "the person used a proxy server ... Do I reject the purchase?"
Shopify's fraud analysis checks AVS and CVV, "whether the customer's location matches the payment method", "whether there is unusual device or network activity", and "whether the customer tried to use more than one credit card". The network flag is the weakest of those. We'd say so even if we didn't sell proxies. Honest buyers use VPNs, and iCloud Private Relay shows websites "a temporary IP address" from a relay operator when someone browses in Safari. A residential proxy, meanwhile, exits through someone's home connection, so a careful fraudster often never trips the flag. It catches lazy fraud and privacy-minded customers in one net.
The 2024 order had the stronger signal right beside it: a declined card, then a different one that worked. That can be innocent, a maxed-out card. It's also how stolen cards get tried. Add an AVS or CVV failure and you have a case. A proxy alone is not one.
Shopify's guidance: "If an order is at a high risk of fraud, then you can attempt to verify the order, cancel the order, or refund the order." It warns that fulfilling high-risk orders without review "can result in chargebacks, which may lead to payment processing issues or removal from Shopify Payments." Shopify Flow can hold risky orders for review. Fraud Protect for Shopify Payments guarantees payment on protected orders, but "your business must be based in the United States."
When the 2022 poster found the buyer's address "kept coming up clean on most searches except for one", that was normal: reputation checkers disagree. Don't ship on one verdict.
Fake accounts, promo abuse and copied landers: what IP blocking can't do
IP rules stop only the laziest bots, because residential proxies give every signup a different household's address; what works sits on the account, the discount and the payment.
On 2025-09-02 someone helping a client posted to r/shopify and r/ecommerce: "Bots are creating hundreds of fake accounts every day using disposable emails and proxies. Fraudulent orders are coming through stolen cards & chargeback are fired against my client."
A proxy company can speak to this part. Residential proxies are sold openly, by us and many others, with a new address per request if you want one. "Block datacenter IPs" stops scripts on cloud servers, a per-IP limit stops one machine on one address, and neither touches rotating residential traffic. Both catch real customers along the way. What helps instead:
- Discount limits. Shopify can cap total uses and limit a code to one use per customer. A fake account is a new customer, though, so signup codes are easy to farm. A welcome code sent after the first paid order is much harder.
- hCaptcha. Shopify turns it on by default for contact forms and for the login, create account and password recovery pages of legacy customer accounts. Check it's still on under Online Store > Preferences, and drop any second captcha app: Shopify says hCaptcha "isn't compatible with custom code or third-party apps that add CAPTCHA".
- Email codes. Shopify's current customer accounts sign in with "a one-time 6-digit verification code". Disposable inboxes still pass, so it raises the cost per fake account without ending them.
None of these is a wall. Stacked, they make every fake account cost more, which is the realistic goal.
Then the copied landers. A BlackHatWorld thread from 2026-06-22 opens, in the snippet Google shows (we couldn't read the replies): "Every time I find a winning product and make a custom landing page, my competitors steal the exact HTML/CSS using spy tools like AdSpy within 48 hours." The ask: "Is there a way to filter out traffic coming from spy bots and data centers so only real buyers can see the store?"
Not really. Meta's Ad Library is public: "People can search for all active ads running across products from Meta." A rival on a laptop or a residential proxy loads your page like any buyer, because to your store they are one. What they can't lift from the HTML is your supplier, your shipping times and your reviews. We won't help with the other road some threads hint at, showing suspected bots and reviewers one page and buyers another.
A second Stripe account from another country through a proxy
A Stripe account's country is set by the business, its bank account and its address, so a proxy from another country changes nothing about it, and Stripe lets one business open several accounts from its Dashboard anyway.
On 2024-07-31 a poster in r/shopify with a UK company and UK bank asked about a new account opened "from country B (using a fresh proxy)", fearing Stripe would find "the old account is linked to the same IP as the new account".
Stripe's support page lists what opening in a country takes: "A legal entity registered in the same country where you plan to open the account", "A physical bank account in that country", and a mailing address there. A UK company with a UK bank gets a UK account, wherever the browser is.
The second account needs no hiding. Stripe's docs: "To create a new account, click the name of your current Stripe account in the upper-left corner, and select New account." Businesses under one legal entity "can use the same tax ID and business information across multiple accounts", same bank account included. The proxy only adds a login from a country where the business doesn't operate. We can't say how Stripe weighs that. It doesn't help.
What a proxy is for if you run stores
For a store owner, a proxy is for steady admin logins and for seeing your store and ads the way a buyer in another country does; it doesn't change who Shopify, Meta or Stripe think you are.
So: one static ISP address per store admin, kept for months. A residential session in a US city to see what buyers there see, billed per GB (rates on the pricing page). Mobile runs EUR 7/GB at 1 GB down to EUR 4.50/GB at 100 GB, useful when you need a carrier address, useless for unlinking a Business Manager. If you only need one address for yourself, this guide covers what to buy.
Payouts, fraud flags and the Stripe country get decided by documents, cards and behavior. Spend there first.
FAQ
Short answers to what the threads above asked.
Do I need a proxy to run multiple Shopify stores?
No. A static address per admin keeps logins consistent, but stores are linked through shared owners, cards and Meta business assets, which no proxy separates.
Will a VPN let me open a new Shopify store after a ban?
No. Terminations and holds follow the person, business, bank and payment details, and a store in a relative's name breaks Shopify's terms.
Should I cancel an order flagged for a proxy?
Not for that alone. Look for several cards tried, AVS or CVV failures, or a location that doesn't match the card, and confirm with the customer or refund before shipping.