Earlier quoted context omitted.
This is a dark pattern and will infuriate both your abusers and legitimate users.
I think I’d only consider it dark if my card was going to be charged. If the app admitted it was just to verify that I’m a real person, for security reasons, I’d be fine with it.
Ask HN: How to provide a free trial without being abused?
31–40 of 76 posts
Re: Ask HN: How to provide a free trial without being abused?
#32Anyone who won’t give you a credit card for the free trial isn’t likely to give you a credit card later to become a customer*. In this space, giving a credit card seems perfectly normal and serves as a vetting function of seriousness for you. * I can concoct exceptions of course: worker who wants to try it for work but doesn’t have their own company card being one. But if you’re targeting cloud users, “doing whatever…
Re: Ask HN: How to provide a free trial without being abused?
#33Anyone who won’t give you a credit card for the free trial isn’t likely to give you a credit card later to become a customer*. In this space, giving a credit card seems perfectly normal and serves as a vetting function of seriousness for you. * I can concoct exceptions of course: worker who wants to try it for work but doesn’t have their own company card being one. But if you’re targeting cloud users, “doing whatever…
Just because AWS can get away with something doesn't mean you can.
Re: Ask HN: How to provide a free trial without being abused?
#34Re: Ask HN: How to provide a free trial without being abused?
#35The only way to prevent this is to identify the users in some way. Every way of identification is a tradeoff between convenience and security.
CC card info is very secure (it's really hard to fake a CC), but it's extremely inconvenient. Personally, if a service requires me to put in my CC info before even trying it, I am not using it.
Phone number is fairly secure (can be faked, but faker must spend money to buy phone cards, so their costs scale linearly), and it's kinda inconvenient, but not really, since every website and its grandmother ask for 2FA nowdays. It's more inconvenient for you, actually, since you have to find a way to send an SMS to any phone, anywhere in the world.
Email addresses can be secure (but only because most email providers require email confirmation over phone number), but they are the most convenient option I can think of. Ngrok does something like that, they require an email for an account, and provide you with a key you can use to use their service. Free option only gets you like 4 tunnels and 40 connections/minute, which I assume is negligible, given their total traffic.
Re: Ask HN: How to provide a free trial without being abused?
#36Just something that occurred to me: You could make a link allowing them to explain by email their need for a no-CC-required trial. That way you make a little speedbump and get a an email you know they use to market to (with opt-in). In reality though, I suspect that most of the users who won't put in a card for a trial won't put in a card to pay either.
Market it as a positive (free trial!) and not a negative (if you don't want to give us your CC info...) and you'll have human psychology in your favor. You also get insight into your users' use cases for free.
Re: Ask HN: How to provide a free trial without being abused?
#37- trigger warning - Allow the whole onboarding process to be done without a CC, don't even mention that. But when a user is doing their first deploy, tell them they need a CC to complete this step. Thanks to the sunken cost fallacy, users will be more likely to proceed.
Re: Ask HN: How to provide a free trial without being abused?
#38Anyone who won’t give you a credit card for the free trial isn’t likely to give you a credit card later to become a customer*. In this space, giving a credit card seems perfectly normal and serves as a vetting function of seriousness for you. * I can concoct exceptions of course: worker who wants to try it for work but doesn’t have their own company card being one. But if you’re targeting cloud users, “doing whatever…
>Anyone who won’t give you a credit card for the free trial isn’t likely to give you a credit card later to become a customer This is extremely weird. It's a B2B - I won't ever use my own credit card just to try some service, heck - I won't provide my credit card to an unknown entity that may lack PIC compliance, either. Asking for the company/budget/contract review/etc. for trial, etc. is a massive hassle as well. >…
If you were a really hot prospect, super-interested in using elest.io for a big project but didn’t want to give a CC because , I’m sure you’d find a way to contact them by email and try to work something out. And they’d find a way to vet you or just turn on a free account for you.* The casual “no way I’m giving my CC” people aren’t high-likelihood future paying customers.
Gate with a CC, make sure there’s a way to send an email/free text form and move on with building the company.
* “no way I’m sending an email either for a free trial just because I won’t give a CC.” “OK, you’re not a prospective customer. It’s a numbers game.”
Re: Ask HN: How to provide a free trial without being abused?
#39Re: Ask HN: How to provide a free trial without being abused?
#40Earlier quoted context omitted.
> If you want to get stricter only allow incoming connections from the trial user's IP to stop them hosting scam landing pages. This could actually be the easiest way to deal with it. You can technically remove the block via system firewall, but I guess the abuse is only for cloud VMs that Elest.io provides and not the BYOVM ones, so you can use provider firewall rules to enforce the limit.
Indeed, no issues at all with BYOVM, and for other VM we have full control on the firewall from the cloud providers and we can block outgoing traffic and limit incoming traffic to the tester IP, I will definitely investigate this!