Shopify has taken a significant step towards securing the relationship between merchants and the partners they rely on. Starting 9 July 2026, Shopify Partners can, and soon must, complete identity verification before requesting collaborator access to merchant stores. As the Shopify developer changelog states: "We're introducing identity verification for partners to help protect merchants, reduce abuse, and make it harder for bad actors to operate." This is one of the most consequential trust-layer changes Shopify has made to its Partner ecosystem.
What changed
The new identity verification process applies to collaborator requests, the mechanism through which a partner gains access to a merchant's live store. Previously, any user within a Partner organisation could send a collaborator request with no identity check beyond their Shopify account credentials. That changes now.
Verification is handled through Stripe's identity platform and requires a government-issued photo ID along with a selfie or liveness check. As Digital Applied's agency guide emphasises, verification is per user, not per organisation. Every individual who sends collaborator requests must verify independently. The account owner verifying does nothing for the account managers, freelancers, or VAs who actually send the requests during onboarding.
Here is the timeline:
-
Today: identity verification is available and optional.
-
Coming weeks: verification becomes mandatory for all new collaborator requests. Shopify has not announced a specific enforcement date, only "in the coming weeks" as of mid-July 2026.
-
After enforcement: unverified users cannot send new collaborator requests until they complete verification.
Importantly, this does not retroactively affect existing collaborator relationships. If a merchant has already granted you access, you do not need to verify to continue working in their store. But as Ecommerce Paradise's analysis notes, access expires after 90 days of no logins, so re-requesting an old client later will require a verified user.
Why this matters
Collaborator access is one of the highest-trust interactions in the Shopify ecosystem. When a merchant approves a collaborator request, they are handing over access to a live store: customer data, order management, theme editing, sometimes even payment configuration. The potential for abuse is significant.
Shopify has seen enough bad-actor behaviour to warrant this intervention. Fraudulent partner accounts have been used for everything from data harvesting to injecting malicious code into merchant stores. By tying identity verification to real government-issued identification, Shopify dramatically raises the cost of operating fraudulently.
This builds on the pattern we have been tracking this week. Just days ago, Shopify tightened App Store review integrity with enforcement teeth, deploying trust-scoring logic to filter manipulated reviews. Now they are extending that same trust-first philosophy to partner access. Shopify is systematically hardening every trust surface in its ecosystem.
What should partners do?
If you are a legitimate Shopify Partner, an agency, a freelance developer, or a solutions consultant, here is the practical action list.
1. Verify now, do not wait: Complete verification on the Request Collaborations page in the Dev Dashboard today. When enforcement begins, unverified users will be blocked. Do not let a client engagement stall because you have not completed a two-minute identity check.
2. Audit your organisation: Every user who sends collaborator requests needs to verify independently. If you have team members who handle client onboarding, make sure each of them completes the process.
3. Update your client onboarding communications: When you send a collaborator request to a new merchant, they will see that you have been identity-verified. This is a trust signal. Use it in your proposals and onboarding materials. "Our team is Shopify Identity Verified" is a meaningful differentiator, especially for merchants who have been burned before.
4. Review your access patterns: This is a good moment to audit which stores you have collaborator access to. If there are stores you no longer actively work on, consider whether that access should be revoked. Good hygiene benefits everyone.
The bigger picture
This change arrives at a time when the entire eCommerce ecosystem is grappling with trust at scale. AI-generated content makes it easier to impersonate legitimate businesses. Phishing attacks against merchants are increasingly sophisticated. And the growing complexity of eCommerce technology stacks means more third parties need access to more systems.
Shopify's approach, using established identity verification infrastructure from Stripe rather than building something proprietary, is pragmatic. Stripe's identity platform is already trusted by financial institutions, which gives the verification meaningful credibility.
For merchants, this change provides a concrete signal to evaluate when approving collaborator requests. A verified partner has literally put their face and government ID behind their identity. That does not guarantee competence, but it does guarantee accountability.
For the broader ecosystem, this sets a standard that other platforms will likely follow. If Shopify, the largest eCommerce platform by store count, requires identity verification for partner access, it creates an expectation that merchants will carry to other platforms.
Other updates from Shopify this week
Two other developer-facing updates landed alongside the identity verification announcement.
POS background extension target. Shopify POS now supports pos.app.ready.data, a background extension target that runs for the entire POS session without rendering UI. Developers can use it to observe events such as transactioncomplete and cashtrackingsessionstart, enabling background data logging, analytics, and integrations that do not require a visible interface.
App pricing expansion. Developers can now create up to 8 public plans (previously 4) and 15 private plans (previously 10) per app. The App Events API also now accepts negative values for credits/adjustments and fractional values, giving developers more flexibility in usage-based billing models.
About On Tap
On Tap is a growth-focused eCommerce consultancy and verified Shopify Partner helping mid-market and enterprise merchants build secure, high-performing stores. From partner onboarding and security audits to platform migration and ongoing technical strategy, On Tap helps merchants and their technology partners operate with trust and accountability at the centre.
If you are a merchant and want to verify your partner ecosystem's readiness, or a partner looking to strengthen your onboarding process, get in touch.
