you might check this for inspiration (https://seguranca-informatica.pt/shopping-trap-the-online-st...).

I used to have a huge IOC collection, but now stopped tracking them.

things like HTML markup, pricing patterns, IPs might inform on specific clusters of fraudsters.

I don't think Shopify cares tbh