Live data from Hacker News

Ask HN: How do you manage registration spam?

news.ycombinator.com

1–10 of 28 posts

Ask HN: How do you manage registration spam?

#1
I've been running digital marketing on a few projects and all seem to suffer from many "spam" signups.

I can only assume the main intent is to find exploits with email and billing systems but there's a long list of other nefarious activity that could be at play.

I've set up a custom tool to monitor and prevent suspicious signups (looking at email deliverability, light identity checks and some AI with tuned prompts). Captchas don't seem to cut it as abusers don't seem to be bots.

Is this a problem other people are facing and if so how do you manage it, if at all?

Re: Ask HN: How do you manage registration spam?

#2
I have the same issue. it only happens on one site of mine but I get like 2-4 new accounts with gibberish as username and first and last name. Just random shit.

I don't know how to outright ban this. I do require verification of email but they never verify. They all use different IPs so they are doing proxy rotation. It was 10-20 a day now its down to 2-4 a day.

Re: Ask HN: How do you manage registration spam?

#3

I have the same issue. it only happens on one site of mine but I get like 2-4 new accounts with gibberish as username and first and last name. Just random shit. I don't know how to outright ban this. I do require verification of email but they never verify. They all use different IPs so they are doing proxy rotation. It was 10-20 a day now its down to 2-4 a day.

I don't suppose it's a problem that can be fully solved; just an ongoing arms race. The hardest part is not deterring genuine users at such a decisive consideration stage.

Re: Ask HN: How do you manage registration spam?

#4
post #3

I have the same issue. it only happens on one site of mine but I get like 2-4 new accounts with gibberish as username and first and last name. Just random shit. I don't know how to outright ban this. I do require verification of email but they never verify. They all use different IPs so they are doing proxy rotation. It was 10-20 a day now its down to 2-4 a day.

I don't suppose it's a problem that can be fully solved; just an ongoing arms race. The hardest part is not deterring genuine users at such a decisive consideration stage.

That's why I don't want to add a captcha.

Re: Ask HN: How do you manage registration spam?

#5
Automatically delete new accounts that have not verified their email within 24h.

Automatically delete verified accounts that have not made a purchase in the first month.

Automatically delete accounts that have not generated a "lead" in the first year.

Replace "lead" with whatever makes sense for your system.

Also maybe put Cloudflare WAF on your signup flow and set it to a high security level.

Re: Ask HN: How do you manage registration spam?

#7
The problem might be with your service. Do you force users to sign up before you share any details with them?

I routinely provide fake info when a website that I think MIGHT be something I am interested in, but refuses to give me enough info to know for sure, until I give them a bunch of personal info. NO THANKS!

Sometimes I tell them my name is Bob. I live at 123 Main St. My email is bob@nowhere.com. If that works to get me in the door, then I can look around to see if I want to become a real customer.

Re: Ask HN: How do you manage registration spam?

#9
post #3

Earlier quoted context omitted.

I don't suppose it's a problem that can be fully solved; just an ongoing arms race. The hardest part is not deterring genuine users at such a decisive consideration stage.

That's why I don't want to add a captcha.

If you are OK with running a Google service, how about Recaptcha V3? No captcha to fill in, just validate the score it generates on the backend.
Post reply on HN