You can block a country on Shopify without Shopify Plus by installing a geo-blocking app like Kedra Shield. Shopify Plus isn’t required—its native Markets feature only restricts checkout, not storefront access. A dedicated app blocks visitors from countries you don’t serve right at the door, on any Shopify plan, starting free.
Geographic control matters because fraud is heavily concentrated. Juniper Research found that North America alone accounts for over 42% of global ecommerce fraud losses by value, despite representing less than 7% of the world’s banked population. If you don’t sell to a region, letting its traffic reach your store is pure downside—fraud risk, card testing, scraping, and skewed analytics with no offsetting revenue.
Table of Contents
- Can you block a country on Shopify without Shopify Plus?
- What Shopify Markets can and can’t do
- Shopify Plus vs. an app: what blocking a country really costs
- How to block a country on Shopify without Plus (step by step)
- Blacklist vs. whitelist: which model should you use?
- Why country blocking alone isn’t enough
- Frequently Asked Questions
Can you block a country on Shopify without Shopify Plus?
Yes. You can block a country on Shopify without Shopify Plus—no plan upgrade, no custom development, and no Shopify Scripts. Blocking a country means preventing visitors whose IP address geolocates to that country from accessing your storefront, not just stopping them from checking out. Because Shopify has no native storefront-level country blocking on any plan, Plus doesn’t unlock this feature either; merchants on every tier use the same solution: a geo-blocking app.
That’s an important distinction. Upgrading to Shopify Plus does not give you a built-in country blocker. Plus adds checkout customization, higher API limits, and enterprise support—but it does not add IP-level access control, VPN detection, or bot filtering at the storefront. So whether you’re on Basic, Shopify, Advanced, or Plus, the practical path to blocking a country is identical: install an app that filters visitors by their detected location.
See how Kedra Shield handles country blocking on any plan →
What Shopify Markets can and can’t do
Shopify Markets controls where you sell and ship, not who can reach your store. You can remove a country from your markets so shoppers there can’t complete checkout, but those visitors can still browse every product page, image, and price. As one Shopify country-blocking guide from Xpertshire puts it plainly: “This only blocks at checkout, not on the storefront. Visitors still browse, fraudsters still try card testing.”
That gap is exactly where the risk lives. A fraudster doesn’t need to complete a normal checkout to hurt you—card testers hammer your payment endpoint with stolen card numbers, scrapers lift your product photography and copy, and spy tools map your catalog. Removing a market stops the final purchase, but it leaves the storefront wide open to everyone, everywhere.
Native Shopify also gives you no IP blocking, no VPN or proxy detection, and no bot filtering at the storefront level. If you sell only to the United States and Canada, Shopify still serves your full site to traffic from every other country on earth—costing you bandwidth, polluting your analytics, and exposing your content. To actually stop that traffic before it interacts with your store, you need a layer Shopify doesn’t provide natively.
Shopify Plus vs. an app: what blocking a country really costs
Here’s the part that surprises many merchants: even Shopify Plus doesn’t hand you country blocking out of the box, yet it’s the most expensive way to get anywhere near it. Shopify Plus starts at roughly $2,300/month on an annual contract—and you’d still need custom development or a third-party app to block visitors by country. A dedicated geo-blocking app does the job on any plan, often for free.
| Method | Blocks storefront access? | IP / VPN / bot blocking | Shopify plan required | Starting cost |
|---|---|---|---|---|
| Shopify Markets (native) | ❌ Checkout only | ❌ | Any plan | Included |
| Shopify Plus (custom build) | ⚠️ Only with custom dev work | ❌ Not out of the box | Plus | ~$2,300/mo |
| Geo-blocking app (Kedra Shield) | ✅ Yes | ✅ Country, city, IP, VPN, ASN, bot | Any plan | Free |
The takeaway: paying for Plus to block a country is spending thousands of dollars a month to solve a problem an app handles better for free. If you’re weighing options, our roundup of the best Shopify country blocker apps for 2026 compares the leading tools by features, accuracy, and price—and you can browse the full Kedra apps lineup to see how store security fits alongside checkout and AI-visibility tools.
How to block a country on Shopify without Plus (step by step)
Kedra Shield blocks countries from a single dashboard on any Shopify plan and layers every surrounding control—city, IP, VPN, ASN/ISP, and bot filtering—so blocked visitors can’t slip back in through a proxy. Country blocking is available on its free plan, and it installs without heavy theme edits. Here’s the workflow:
- Install Kedra Shield from the Shopify App Store. Add the app to your store on your current plan—no Plus upgrade needed. The free plan already includes country and IP blocking.
- Open the Country Blocker and pick your model. Choose blacklist to exclude specific countries you don’t serve, or whitelist to allow only the markets you sell to. Whitelisting is the cleanest option if you ship to just a handful of countries.
- Add the countries. Search and select the countries to block (blacklist) or the only countries to allow (whitelist). Rules apply at the storefront, so blocked visitors never reach your products.
- Turn on VPN, proxy, and TOR blocking. This closes the evasion loophole so a blocked-country visitor can’t reappear through an anonymizer with an exit node in an allowed country.
- Layer city, IP-range, and ASN/ISP rules where needed. Target specific fraud hotspots with city rules, block individual IPs or ranges tied to abuse, and shut down entire data-center networks by ASN—the source of most bad-bot traffic.
- Set a redirect or block page and review analytics. Optionally redirect international visitors to a relevant page instead of hard-blocking them, then check the blocked-visitor dashboard (blocked IPs, locations, and reasons) to confirm protection is working and tune out any false positives.
That’s the entire process—no Scripts, no Liquid edits, and no Plus contract. To pick which regions to target first, our fraud hotspot mapping guide walks through identifying the countries generating the most chargebacks.
Blacklist vs. whitelist: which model should you use?
Both approaches block countries; they differ in default posture. Choosing the right one depends on how many markets you actually serve:
- Blacklist (block specific countries): Everyone is allowed except the countries you list. Best when you sell broadly but want to shut out a few high-fraud or out-of-market regions. Easy to start with; requires ongoing additions as new threats appear.
- Whitelist (allow only your markets): Everyone is blocked except the countries you approve. Best when you serve a defined set of countries—say, the US, Canada, and the UK—and want everything else gone by default. It’s the stricter, lower-maintenance model for focused stores.
If your target market is well defined, the whitelist model gives you the tightest control with the least upkeep. Our deep dive on the whitelist-only store strategy covers exactly when inverting your default from “everyone allowed” to “nobody allowed unless approved” makes sense—and how to avoid blocking legitimate shoppers.
Why country blocking alone isn’t enough
A country rule is only as strong as its evasion resistance—and plain country blocking is trivially bypassed by a VPN. A fraudster in a blocked country simply connects through a VPN with an exit node in an allowed country, and a country-only rule waves them straight through. That’s why VPN and proxy detection isn’t an optional add-on; it’s the feature that makes country blocking real.
The scale of automated evasion is what makes this urgent. According to the 2025 Imperva Bad Bot Report, automated traffic now makes up 51% of all web traffic—surpassing humans for the first time in a decade—and bad bots alone account for 37% of internet traffic. Imperva’s researchers warn:
“Bad bots are now a persistent, costly threat to businesses. With AI accelerating their growth, organizations must act decisively adopting advanced mitigation strategies to protect against fraud, financial losses, and security risks.”
Accuracy is the other half of the equation. Country-level geolocation is highly reliable—MaxMind reports country accuracy generally exceeds 99%—but city-level accuracy is far lower, roughly 66% for U.S. cities within a 50 km radius. Treat country blocking as your precise primary layer, city blocking as a coarse supplement, and VPN/proxy/ASN detection as the backstop that closes the loopholes. For a deeper look at anonymizer traffic, see our VPN and proxy blocking guide for Shopify.
Kedra Shield bundles all of these layers—country, city, IP, VPN/proxy, TOR, ASN/ISP, and bot blocking—plus content protection (right-click, copy-paste, and dev-tools blocking) that keeps scrapers off your images and copy. It holds a 4.5-star rating across 126 reviews on the Shopify App Store, with a free plan and paid tiers from $7.99 to $22.99/month.
Block fraud traffic by country — install Kedra Shield free →
Frequently Asked Questions
Can I block a country on Shopify without an app?
Not at the storefront level. Shopify Markets and shipping zones only control where you sell and ship—an excluded country’s visitors can still browse your entire store, just not check out. To actually block or redirect traffic by country, IP, or VPN, you need a third-party app like Kedra Shield, because Shopify offers no native access-blocking, IP filtering, or bot detection on any plan.
Does blocking a country require Shopify Plus?
No. Shopify Plus does not include a native country blocker, so upgrading wouldn’t add this capability anyway. Merchants on every plan—Basic, Shopify, Advanced, and Plus—block countries with the same solution: a geo-blocking app. Kedra Shield runs on any plan and includes country blocking on its free tier, so you never need Plus to control who reaches your store.
Is blocking a country on Shopify free?
It can be. Kedra Shield’s free plan includes country and IP blocking, image and content protection, and basic bot filtering. VPN and proxy detection is limited on the free plan and becomes unlimited on the Basic plan at $7.99/month, which also unlocks city-level and ASN/ISP blocking. You can start blocking countries at no cost and upgrade only if you need the advanced evasion controls.
Will blocking countries hurt my SEO?
No, if configured correctly. Blocking regions you don’t serve doesn’t affect rankings in your target markets, and reputable apps let you whitelist search-engine and AI crawlers so Google, Bing, and assistants like ChatGPT still index your store. Using a geolocation redirect instead of a hard block is the safest option, since it sends international visitors to a relevant page rather than an error.
What’s the difference between Shopify Markets and country blocking?
Shopify Markets restricts where you sell—it removes the ability to check out from unsupported countries but still lets those visitors browse your storefront. Country blocking restricts who can access your site at all, stopping unwanted traffic before it reaches your products. Markets is a selling tool; a country blocker like Kedra Shield is a security tool. Fraud prevention needs the second one.
The bottom line: you don’t need Plus to control who reaches your store
Blocking a country on Shopify has nothing to do with your plan. Shopify Plus won’t hand you a native country blocker, and paying thousands a month for it to build one is the most expensive route to a problem an app solves for free. On any plan, the answer is the same: install a geo-blocking app, choose a blacklist or whitelist model, and layer VPN, proxy, and bot detection so blocked visitors can’t route around your rules.
With North America absorbing over 42% of global ecommerce fraud and automated traffic now making up the majority of the web, filtering out the regions you don’t sell to is one of the highest-leverage security moves a merchant can make. Kedra Shield covers the full stack—country, city, IP, VPN/proxy, ASN/ISP, and bot blocking—plus content protection, all starting on a free plan and running on any Shopify tier.
Install Kedra Shield free on the Shopify App Store and start blocking traffic by country today—no Shopify Plus required.
Kedra Team
Expert insights on Shopify development and e-commerce growth strategies.