How to Prevent Fake Account Signups
Fake signups fuel spam, fraud and trial abuse. Learn how to stop them with IP intelligence — VPN, proxy and reputation signals — without hurting real users.
Fake signups are where a lot of downstream abuse begins — spam, fraud, trial farming, review manipulation. The signup form is also the cheapest place to stop it, because you can evaluate risk before the account exists. Here's how to do that with IP intelligence.
Why fake accounts happen at the IP layer
Creating accounts in bulk means looking like many different people. Attackers achieve that by routing through proxies and VPNs, so each signup appears to come from a fresh user. That reliance on anonymising infrastructure is also their weakness: it's detectable.
Check a signup IP for risk signals
The signals to check at signup
- Proxy / VPN / Tor usage — bulk signups lean on anonymisers. Use the proxy detection API and VPN detection API.
- Residential-proxy signals — the strongest evasion indicator; see the FBI's credential-stuffing warning.
- IP reputation — prior abuse from the address or range. See what is IP reputation.
- Hosting origin — a "new customer" on a datacenter ASN is suspicious.
Roll these into a single IP fraud score so your signup logic stays simple.
A signup defense that doesn't punish real users
The goal is friction proportional to risk, not a wall:
| Risk score | Signup handling |
|---|---|
| Low | Allow normally |
| Medium | Require email/phone verification |
| High | Verify + manual review, or soft-block with appeal |
Layer in non-IP signals too — disposable-email detection, device fingerprinting and behaviour — for defense in depth. But IP scoring is the highest-leverage first filter.
Implementation
- On signup submit, look up the client IP server-side.
- Read the fraud score / proxy + VPN verdicts.
- Apply the table above; log the signals for later review.
This mirrors the pattern in how to detect VPN in your signup flow.
Bottom line
Most fake signups ride on proxies, VPNs and low-reputation IPs, so a single IP risk check at the signup form filters a large share of them. Score the signup and add verification proportional to risk — you stop the bulk abuse without blocking legitimate new users.