I got a UPS invoice for a warehouse we closed years ago, is this a scam?
A growing number of Shopify merchants report UPS invoices for shipments they never made, addressed to warehouse locations that were deleted from their store years ago. Here's what's actually going on and how to shut it down.
What's going on
A UPS invoice shows up in the mail or your inbox, addressed to your business, for a shipment you have no record of, sometimes for a few hundred dollars, and sometimes listing a pickup or origin address that used to be one of your fulfillment locations in Shopify: a warehouse you closed and deleted from your Locations settings a year or more ago. The invoice looks official, with a real UPS account number, a tracking number, and your business name on it. It's easy to assume it's a billing mistake on your end until you realize you never shipped anything from that address, or through that carrier, on that date.
This is showing up often enough across merchant forums that it's worth taking seriously rather than dismissing as a one-off clerical error. The common thread: many merchants who use Shopify's built-in shipping labels are buying rates through carrier relationships that Shopify manages, rather than through a UPS account they log into directly. Deleting a location from your Shopify admin removes it from your shipping profiles and inventory allocation, but it doesn't reach into UPS's own systems and scrub any address history tied to your shipping activity. That stale address can keep surfacing on paperwork long after you've stopped using it.
None of this means your Shopify store itself was breached, and it isn't confirmed to trace back to a single cause in every case, but the pattern (an old, no-longer-active address, an account number you didn't personally set up or manage, and charges for shipments you don't recognize) points to unauthorized use of a shipping account rather than a Shopify billing glitch.
Why it happens
The core vulnerability sits on the carrier's side, not Shopify's: a shipping account number can, in practice, end up on a shipment without the account holder verifying or authorizing it in advance. If your account number has leaked, been guessed, or simply been visible on an old shipping label, someone else can ship against it and leave you with the invoice.
Depending on how your store is set up, the account behind your shipping labels may be one Shopify manages on your behalf rather than one you can log into directly, which is why the first sign of a problem is often the invoice itself rather than something you'd catch by monitoring an account yourself.
Deleted Shopify locations compound the confusion: the address disappears from your store's admin, but it doesn't disappear from the carrier's account history, so an old warehouse can keep reappearing on invoices as if it were still active.
5 ways to fix it
Verify the invoice with UPS directly before paying anything
Don't call the number printed on the invoice or reply to it. Go to ups.com, find UPS's official billing support or fraud-reporting contact, and give them the account number and tracking number from the bill. Ask them to confirm whether the shipment actually originated from your account and, if not, to open a fraud investigation and place the charge on hold. Merchants who've done this report getting the charge reversed once UPS traced it to an unauthorized shipment filed against their account number.
Check whether the shipping account behind your Shopify labels is yours to audit
If you print labels through Shopify's built-in shipping tools, those rates are typically purchased through carrier relationships Shopify manages, not an account you can log into and inspect yourself. In that case, ask Shopify support to review the account tied to your store's shipping activity for anything unfamiliar. If instead you've connected your own UPS account to Shopify to use your negotiated business rates, you already have direct access to UPS's account tools, which is the fastest place to check for unauthorized shipments and lock the account down. Shopify support can tell you which situation applies to your store.
File a complaint with the FTC and reference it when you follow up with UPS
A formal complaint at reportfraud.ftc.gov creates a paper trail and, anecdotally, has prompted faster invoice cancellations when merchants forwarded the confirmation to UPS. Keep a log of every call, rep name, and date; carrier fraud departments move slowly, and a documented history speeds up escalations.
Clean up stale locations and shipping contacts in Shopify
Go to Settings, then Locations, and delete or deactivate any warehouse you no longer use; old addresses sitting in your location list are what fraudulent invoices tend to reference. Removing a location from Shopify doesn't touch UPS's own records, so this won't retroactively scrub anything on their end, but it reduces future confusion on yours. While you're there, review and update the contact name, email, and phone number attached to your shipping settings so outdated contact details aren't the first thing an impersonator can exploit.
Watch for repeat invoices and consider a fraud alert if personal data was involved
This tends to happen in clusters rather than as a one-off; merchants who received one fraudulent invoice often received more in the following weeks. If the invoice included personal information such as an owner's name, home address, or anything resembling an SSN, placing a fraud alert with one of the credit bureaus is a reasonable precaution, even though the immediate issue is a business billing dispute rather than identity theft.
Bottom line
This is a carrier billing and account-security problem, not a Shopify configuration bug, so no app, from BesPoP or anyone else, can reach into UPS's account records and fix it for you. The real fix is verifying invoices through UPS's own fraud channel, confirming with Shopify support which shipping account applies to your store, and keeping your location list and shipping contacts current so stale data isn't sitting around to be reused. Treat it as part of general store security hygiene, rotating contacts, auditing locations, monitoring carrier accounts, rather than something to install.
Browse the rest of the problem library, run a free storefront scan to catch issues like this automatically, or email us and we'll work out a custom solution for it.