Playbook
Welcome discount reuse: what to check before you call it abuse
Before you treat a reused welcome code as abuse, check the signals that point to one person: a shared phone, address or near-identical email. They are reasons to review, never proof of misuse, because relatives, gift buyers and forgotten accounts look the same. Shopify’s limit goes by email or phone.
By MergeGuard team
Last updated
4 min read
On this page
Welcome offers are meant for new customers. Shopify’s one-use limit goes by a customer’s email address or phone number, and a returning shopper with a new email can look new. So the same person can use a welcome code twice without anyone breaking a rule on purpose, and sometimes on purpose. This page covers how it happens, which signals deserve a review, and how to respond without treating loyal customers or families as suspects.
Key insight
How reuse happens
Shopify lets you limit a discount code to one use per customer. Its Help Center says the Limit to one per customer setting “tracks a customer’s email address or phone number to limit the discount to one use per customer” (Shopify Help Center). So a shopper who checks out with a new email or phone can use the code again, as a Shopify Community answer also describes. A code aimed at a customer segment works the same way: Shopify’s Help Center says those customers “can be identified when they check out using a valid email address or phone number” (Managing discount codes).
Merchants describe both sides of this. Some shoppers create extra accounts to get a one-time discount again (merchant report). Many more end up with a second profile for ordinary reasons: a new email, a typo, a forgotten password or a wallet that fills in a different address. See why Shopify creates duplicate customers.
Signals worth a review
| Signal | What it suggests | Ordinary explanations |
|---|---|---|
| Same phone number on both profiles | Likely the same person | A shared family or office phone |
| Emails that differ only by a typo or a number (anna.k@, anna.k2@) | Likely the same person | A mistyped first attempt, or relatives with similar addresses |
| Same address and the same name | Possibly the same person | A customer who forgot their account and made a new one |
| Same address, different names | Possibly people who live together | Partners, flatmates, parents and children, gift recipients |
| Same surname only | A reason to look, and little more | Family members, common surnames |
Read the table as a guide to where to look first. None of these signals tells you why someone used the code. A shopper who forgot their account and signed up again got a welcome offer they didn’t need, but they didn’t set out to game it.
What a match doesn’t prove
Matching details show that two profiles may belong to one person. They say nothing about intent, and some point to two people:
- People who live together. Two people at one address are two customers. A partner using the welcome code after you’ve already sold to the other is a new customer. In MergeGuard, you can mark relatives as family members.
- Gifts. Gift buyers send orders to someone else’s address. That address then appears on two profiles.
- Forgotten accounts. Merchants report customers forgetting an account and making another (merchant report).
- Typos. A mistyped email creates a second profile that the shopper doesn’t know about.
So avoid calling a match fraud, in your notes, with your team or to the customer. Accusing a loyal customer over a few pounds or dollars costs more than the discount did.
Change how the offer works
The fixes that work best apply to everyone at once:
- Send the code to the email that signed up, rather than showing one public code anyone can copy.
- Make each code single-use, so a shared or forwarded code works once.
- Decide what a “new customer” is for you. The partner or flatmate of someone who already buys may still be a new customer you want.
Contacting a shopper about a welcome discount is rarely worth it. If the amounts are large and the evidence is strong, for example the same phone and near-identical emails across many orders, deal with it in your store policy rather than one customer at a time.
When to merge the profiles
If a group is clearly one person, merging puts their orders on one customer, and from then on they look like the returning shopper they are. Merge with care:
- A Shopify merge is permanent. Shopify’s Help Center says: “After the profiles are merged, you can’t reverse the process.”
- Marketing status carries over: “If the customer is subscribed to email and SMS text marketing in one profile, but not in the other, then the merged profile is subscribed.”
- Relatives, flatmates and close calls stay separate. Merging two people shows one person’s orders and addresses under the other’s name.
Merging also helps the next campaign. Someone who already buys under one profile shouldn’t receive a welcome or win-back discount on another. See win-back audiences.
Step by step
List the orders that used the welcome code
Export orders that used your welcome discount in a set period, with the customer ID, email, phone and shipping address.
Group orders by shared details
Look for the same phone number, emails that differ only by a typo or a number, or the same address with the same or a similar name.
Rank each group by what the matching details show
Same phone plus a near-identical email points to one person. The same address alone shows little, because people who live together and gift buyers share addresses.
Look for the ordinary explanation first
Check the names, the delivery addresses and the order history. Different names at one address usually mean different people.
Decide what to change
Change how the offer works for everyone, for example by sending a single-use code to the email that signed up. Leave individual customers alone unless the evidence is strong and the amounts matter.
Merge only proven duplicates
If the profiles are clearly one person, a merge puts their orders on one customer, so your lists and reports see one returning shopper. A Shopify merge is permanent, so leave relatives and close calls separate.
Sources
Related
- Same address, same person? Telling a duplicate from familyTwo Shopify profiles at one address may be one person or two. Use this decision table to tell a duplicate from family before you make a permanent merge.
- Family membersIn MergeGuard, family members are profiles you marked as not a duplicate because they belong to relatives. Learn why they stay separate and how to mark them.
- Duplicate customer profileA duplicate customer profile is a second Shopify profile for the same person. Learn how to spot one, how to tell it from relatives, and what to do next.
- Why Shopify creates duplicate customersThe common causes of duplicate customer profiles in Shopify, from guest checkout and second emails to POS and imports, marked documented or merchant-reported.
- Win-back listsMergeGuard’s win-back audience checks every Shopify profile a customer has before saying they stopped ordering, so your discount skips people still buying.
- Find and review duplicatesMergeGuard scans your Shopify customers, groups duplicate profiles and shows which name, email, phone and address details match, so you decide what merges.
- Build an audience list that counts each person oncePick a ready Audiences list, adjust its rules with a live preview, then sync it to Klaviyo or export a CSV. See which audience each MergeGuard plan includes.