A traffic spike can look promising until orders stay flat and most of the new sessions come from an unexpected country. You spend time questioning your ads or changing product pages when the extra visits may never have been shoppers. Identifying the pattern lets you put that effort into customers and use ShieldLeaf to act on unwanted country traffic.
Leafy’s Quick Answer
Look for bot-labelled sessions, a recurring country pattern, and no matching campaign or checkout activity. When those clues point to a country you do not serve, use ShieldLeaf to give visitors from that country a blocked-access page or redirect. Shopify’s report filter changes the numbers you see. ShieldLeaf changes the storefront experience those visitors receive.
Confirm what is behind the spike
In a supported Shopify sessions report, compare Human or bot session with country over the same dates. Shopify’s bot-filtering documentation says its September 2026 update excludes identified bots by default. Include bot sessions when investigating, or you may miss the pattern. Classification covers new data from 7 October 2025.
Use the label alongside other clues. Has the same country appeared repeatedly? Are visits concentrated on particular landing pages or devices? Is there checkout activity to match the increase?
Check for a legitimate cause such as publicity, a campaign, an integration, or performance testing. Shopify’s guide to identifying bot activity explains why a spike alone is weak evidence. An unexpected country does not prove a visit is automated either. The useful finding is a repeated pattern of unwanted visits from somewhere your store does not sell.
See why the distinction matters
Imagine a store selling only in Italy. In this illustrative example, it normally has 1,000 weekly sessions and 20 sessions completing checkout. Another 3,000 sessions arrive, mainly from China, without increasing completed checkouts.
| Weekly view | Sessions | Sessions completing checkout | Conversion rate |
|---|---|---|---|
| Before the spike | 1,000 | 20 | 2% |
| Including the extra visits | 4,000 | 20 | 0.5% |
The lower unfiltered rate could prompt the merchant to discount products that were already selling. Reviewing the human-or-bot breakdown shows that 2,700 of the extra sessions are labelled as bots. The country pattern repeats, and there is no campaign aimed at China.
That evidence supports a focused decision. Keep serving Italy and use ShieldLeaf to handle access from China. The app’s country rule covers visitors identified as coming from the selected country, so choose a country you intend to exclude from storefront access.
Vanilla Shopify falls short at this point. Filtering identified bots out of a report does not stop unwanted visitors browsing the store, and it cannot remove every unclassified bot from your figures. A cleaner chart leaves the access problem unresolved.
Turn the finding into one ShieldLeaf rule
For this example, ShieldLeaf lets the merchant apply the decision without editing theme code or maintaining individual IP blocklists.
- Enable the ShieldLeaf app embed in Shopify, then open Protection in the app.
- Under Blocked countries, search for China and add it to Selected countries. Use the specific country rather than a whole regional preset for this case.
- In Blocked visitor experience, choose Show a blocked-access page. Set a clear message such as “Our store currently serves customers in Italy. Access from your region is unavailable.” A redirect is also available when another destination is more useful.
- Use the private preview to check the message and handling before turning protection on. Confirm that visitors in your selling market can still shop.
The result is a defined response to the traffic you identified. Visitors handled by the China rule receive the blocked page while the store continues serving its intended market. You can change the country or handling mode inside the app as your markets change.
Choose the plan for the problem you found
ShieldLeaf Free includes one active blocked country, blocked-page or redirect handling, and previews. That covers the example without a monthly app charge. If the pattern spans several countries, Pro costs US$5.90 a month and adds unlimited countries, groups, presets, and blocked-visit activity logs for reviewing how your rules are being applied.
Blocky puts country blocking for live stores behind its US$9.99 monthly Basic plan. Its free plan is restricted to development and partner stores. Paying that monthly fee for one unwanted country is an unnecessary expense when ShieldLeaf Free covers the task. For broader country coverage, ShieldLeaf Pro is US$4.09 less per month than Blocky Basic. Prices checked 4 October 2026.
After launch, judge the rule by the visitor handling you previewed and, with Pro, blocked-visit activity. Do not expect Shopify’s historical session totals to disappear or use a conversion-rate change alone as proof. You now have a specific rule to check rather than another unexplained spike to watch.
Install ShieldLeaf’s free plan and preview the country rule your traffic evidence supports.
