Shopify checkout not working? How store owners find what broke it, as a customer

When Shopify checkout is not working, check Shopify’s status page first, and if Checkout shows as operational, look at the store itself. Shop it on a phone as a new customer in a fresh private window, check that checkout stays on the store’s own web address, then look at what changed last. To have a new customer go through checkout after every change, use Obsession: its AI customers shop your store and your competitors’ and keep every page, code and email as it arrived.

Store owners and heads of ecommerce can run these checks the moment orders drop or a shopper reports a problem, and so can the Shopify developers and agencies they call. The first 5 checks are steps a shopper takes on a phone, and the 6th is a test email sent from the Shopify admin. Each comes with what a pass looks like, and none goes past the payment page.

A Shopify checkout breaks in one of two ways. It can fail where shoppers see it: a button that does nothing, a refused code, no shipping rate or a missing payment method. Or it can look normal while it sends shoppers somewhere else, which is what code delivered through 3 Shopify apps did in October 2026.

What happened to Shopify checkouts in October 2026

In October 2026, the developers of 3 Shopify apps said an attacker had added code to stores through their app, code that could send shoppers who pressed Checkout to a page on another website. Each developer set out what happened on its own page.

HulkApps said Shopify turned off the app’s theme extension for a time, which stopped the redirects, and that it found no sign of any other HulkApps app sending checkouts anywhere. Logbase said merchants’ Shopify accounts and log-in details weren’t used in the attack, and that Selleasy is fully working again. Swym paused Wishlist Plus for every merchant as a precaution, and its FAQ of 20 October says access is coming back in phases.

Roman Zipp, who met one of these pages while shopping on 10 October, published his investigation the same day. He found that the lookalike page passed the shopper on to the store’s real checkout once the card details were typed in. The code he examined ran once per browser session, so a second try in the same window would look normal.

On 20 October, Shopify asked every app developer to act that week, saying attacks on apps are rising as AI gets better at finding weak spots. The same day, Shopify’s online stores began asking customers to confirm before sending them to another website. Since 23 October, they block websites Shopify has identified as malicious and ask for confirmation only on suspicious ones.

Shopify’s status page listed no incident between 10 and 20 October. The redirects came from app code on the stores, and they showed only to a shopper who pressed Checkout.

If a shopper reports a strange checkout

• Note the page and the time the shopper saw, which Swym’s FAQ asks merchants to send with any report. Pass them to the developer of each app that runs on the storefront and to Shopify Support.
• Passwords. Swym’s FAQ calls changing passwords good practice and recommends turning on two-factor authentication.
• Duties to tell people. Swym’s security update reminds merchants that they may have to notify shoppers or regulators. It names breach notification laws, data protection laws such as GDPR and payment processor agreements, and asks merchants to check with their advisers.

Check whether Shopify checkout is down today

Shopify checkout issues today show on Shopify’s status page, at status.shopify.com, which lists Checkout beside the admin, the storefront and point of sale. If Checkout shows an incident, the fault is Shopify’s, and the page posts updates until it is resolved.

If Checkout shows Operational, look at the store itself. Shopify notes on the page that some issues affecting a small share of stores may not appear there, and it links to My Shopify Status, a log-in view of a single store. A store that takes PayPal or another provider should check that provider’s status too, as Shopify’s page on checkout payment problems advises.

The 6 checks, from the cart to the order email

Use a phone, plus a second phone with the other operating system if possible, because wallet buttons such as Apple Pay depend on the device. Open a new private window for every run, signed out of the admin, a step Shopify’s theme troubleshooting page also suggests. Use a real address in the store’s main market, screenshot each step with the time showing, and stop at the payment page.

1. Checkout opens from the cart and from Buy it now

Add an in-stock product, open the cart and tap Checkout. Then go back to the product page and, where the store shows one, tap Buy it now, which Shopify says skips the cart and goes straight to checkout. A pass: both open checkout within seconds, and nothing such as a chat button or a pop-up sits over either button. Branded buttons such as Shop Pay or PayPal depend on the payment methods switched on and on the shopper’s device, browser and payment history, so check a missing one on a second device before calling it a fault.

2. Checkout stays on the store’s own web address

Read the address bar the moment checkout opens. A store’s primary domain is the web address Shopify shows in the address bar for its online store. A store with a custom storefront built on Hydrogen, Shopify’s framework for building one, runs checkout on a subdomain such as checkout.example.com, as Shopify’s legacy Hydrogen guide sets out.

A pass: from the cart to the payment page, the address bar shows the store’s own domain or a checkout subdomain of it, or the page of a payment provider the shopper picked, such as PayPal’s. A block or a confirmation message from Shopify after tapping Checkout means something on the page is sending shoppers off the store. Stop there and go to what changed last. Most outside websites open with no message at all, so the address bar is the check to rely on.

3. Every code applies

Try each code on the banner, the pop-up and the latest email, on a full-price item and a sale item. A pass: each code applies to the items it covers. Shopify’s discount codes FAQ explains the messages a shopper meets. “Enter a valid discount code” means the code doesn’t exist or isn’t active. A message that the code isn’t valid for the items in the cart means it doesn’t cover those products. The same page notes that a third-party app that changes pricing or checkout can hide the code field.

4. Shipping rates show for every market

Enter a real address in each country the store sells to and read the delivery options. A pass: at least one rate shows for each address and matches the shipping page. When none matches, the shopper sees “Shipping not available” and a note that the order can’t be shipped to that address. Shopify’s shipping troubleshooting page traces this to shipping zones, product profiles, weights, the physical product setting and locations. It also warns that an abandoned checkout keeps the rates from when it was created, so test with a new one.

5. Every payment method loads, on both phones

Go as far as the payment page and stop. A pass: every method switched on in Settings > Payments appears, with Apple Pay on the iPhone and Google Pay on the Android phone where the store offers them. When no one can pay, Shopify’s page on checkout payment problems starts in Settings > Payments: switch off a test mode left on, and check the provider’s account for restrictions. While test mode is on, no real payments are captured.

For a Shopify PayPal checkout not working, Shopify’s pages give 4 causes. PayPal Wallet doesn’t show at checkout while Shopify Payments test mode is on. PayPal won’t activate unless the store’s country matches the PayPal account’s, and it needs a professional business account. On an order with a subscription, Shopify hides PayPal unless PayPal has approved the store for repeat billing, which PayPal calls reference transactions.

6. The order confirmation email still sends

This check needs no order. In Settings > Notifications, click Customer notifications, open Order confirmation and click Edit code. Shopify’s steps are Preview, then Send test email, which goes to the address used to log in to the admin. A pass: the test email arrives, with the store’s details and links as they should look. A customised template that fails can go back to Shopify’s version with Revert to, then Default, then Save.

When customers say the email never came, Shopify’s customer notifications page says to check the spam or junk folder, then try an address with another email provider. The payment step itself needs a test order with Shopify’s test card numbers, which how do I test my Shopify store sets out step by step. Shopify asks for one during store setup and whenever payment settings change.

What changed last

Note when the problem started, then list every change in the days before it. Switch off or undo each one, newest first, and test again in a new private window after each.

• Apps. Shopify’s page on app embeds notes that some embeds add code to a store without showing shoppers anything. Turn off the newest app’s embed in the theme editor’s App embeds panel, save and test again. Shopify’s theme troubleshooting page suggests uninstalling a newly installed or updated app for a while, and contacting its developer if the problem goes away.
• Checkout apps. In Settings > Checkout, the checkout editor’s Apps panel lists every app block in checkout. An app allowed to block checkout rejects an order when the shopper leaves its required field, such as a checkbox, incomplete.
• The theme. Shopify’s theme troubleshooting page suggests installing a different theme. Add a free Shopify theme to the theme library without publishing it, and preview the store with it. If the break disappears, it sits in the current theme. The code editor’s Timeline restores an earlier version of a file, replacing the whole file, so copy its current contents first.
• Theme files an app changed. Swym’s FAQ asks merchants to look in the code editor for theme file edits made by its app. It also asks them to search the theme for the web addresses used in the October attacks, which it lists.
• Discounts. A code expires at the end date and time set for it. When a shopper enters codes that can’t be combined, checkout says “Some discount codes couldn’t be used together. We applied the best combination”, as Shopify’s discount codes FAQ explains.
• Markets. Shopify’s page on checkout payment problems links wrong prices or currency to market settings. Check each market’s currency, and that the shopper’s country sits in the market expected.
• Payments. Any change in Settings > Payments, test mode included.

Who owns each fix

Send each owner the error, the time with its time zone, the browser and device, and a screenshot. Shopify’s page on checkout payment problems asks for the same details, with the steps already tried, before contacting support. When the fix is live, run the same check again, so the break and the fix sit side by side.

Check again after every change

A single clean run doesn’t clear the checkout for good. HulkApps said the October redirect didn’t succeed on every visit and was blocked by some browsers, and Zipp found it ran once per browser session. Run the 6 checks again in a new private window after every change to the store’s apps, theme, discounts, shipping or payments. During a sale, run them every day. Black Friday falls on 27 November 2026 and Cyber Monday on 30 November.

When checkout fails for everyone, every online order stops until it is fixed. Yearly online sales divided by 365 give an average day, and divided by 8,760 an average hour. The year’s busiest days carry far more than the average.

For sale week, the Black Friday checklist adds 12 tests as a new customer, from the pop-up to the reminder emails.

AI customers that go through checkout after every change

Obsession makes AI customers that sign up to any company and keep every email, offer and price it sends, so you can find your revenue leaks, watch your competitors and prospect with proof. An AI customer is an AI agent that becomes a real customer of a company, with its own inbox, phone number and browser, and keeps what the company sends and shows it as evidence.

On a Shopify store, Website audit runs after every release: a fresh AI customer goes through the store on a phone and a desktop. It signs up, opens every email and link, tries each code at checkout and stops before payment. Every break comes back with its screenshot and a drafted fix, then a fresh run once the fix ships. Store leak checks give every journey, such as a sign-up or a checkout, a new AI customer each week. With Shopify and the store’s email tool connected, read only, a theme publish or an edit to an email flow reruns the checks it touches within the hour.

The same AI customers shop competitors’ stores, so the store’s team sees every welcome offer, price and reminder a competitor sends its new customers. The team reads the results at 4, 12, 24 or 48 hours, or keeps the AI customers watching for as long as it wants. A CAPTCHA is the puzzle a site shows to stop automated visitors. Where a store puts a CAPTCHA or a bot check in front of a step, the report names the step it couldn’t test.

Every AI customer says it’s an AI when it talks to a person, never uses fake payment details and never gets round a CAPTCHA or a bot block. It keeps every email and page exactly as it arrived, as the agents page sets out. The team behind Obsession has mystery shopped 1,500 ecommerce stores as a new customer since September 2026. Obsession runs these checks at 300, 1,000 or 5,000 brands a month, and it’s built for millions.

Ways to catch a broken Shopify checkout, compared

Obsession makes AI customers, so every other option is described from its provider’s own pages as of 1 November 2026.

If your store needs a new customer to go through checkout after every app, theme or discount change, with every step kept as a screenshot, use Obsession. Shopify’s status page settles whether an outage is Shopify’s, and a test order tests the payment step itself. Shoptest or Checkly fit an alert at any hour on a checkout path that rarely changes. A store with steady orders and few changes can run the 6 checks by hand after each change.

Start tonight

1. Open Shopify’s status page and read the Checkout line.
2. Run the 6 checks on a phone in a new private window, and write pass or fail beside each.
3. List every change in the days before the problem began, then switch off or undo the newest first, testing after each.
4. Send each break to its owner with the screenshot and the time, then run the same check once the fix is live.

When orders fall while visits hold and checkout passes all 6 checks, traffic but no sales works back from the ad to the payment page. For the data, speed and search behind a store, use the Shopify store audit checklist.

Questions about Shopify checkout not working