Page 1 of 1

Any good way to Stop account creation by bots?

Posted: Tue Apr 09, 2024 9:15 am
by flaggi
Is there any good addon or alike to stop bots from creating a customer account on the site?
I've tried Google Recaptcha but that doesn't stop the bots and searched the forums for tips but havn't found anything that solves my problem.
It wouldn't be a problem if one or two fake customers was created but i get several per day.
(Phoenix 1.0.8.20 PRO.)

Re: Any good way to Stop account creation by bots?

Posted: Tue Apr 09, 2024 9:23 am
by heatherbell
flaggi wrote: Tue Apr 09, 2024 9:15 am It wouldn't be a problem if one or two fake customers was created but i get several per day.
We've used every variation of Captcha available but still periodically get hit by the exact same account creations.
It seems to be periodic, a spate of them, then nothing for a while.
Investigating access logs shows they all come from Russia and the best we have managed is to block the IP addresses when we have identified them.

Re: Any good way to Stop account creation by bots?

Posted: Tue Apr 09, 2024 9:32 am
by burt
app.php/addons/find-contribution/result ... ds=captcha

Lots of shopowners have good success with the freebie Maths Captcha;
app.php/addons/free_addon/maths_captcha

Re: Any good way to Stop account creation by bots?

Posted: Tue Apr 09, 2024 9:49 am
by flaggi
Thank you Bell and Burt for the suggestions.
Blocking IP may be the best option for me since most of the logins seems to be from Russia, India and Maldives.

Re: Any good way to Stop account creation by bots?

Posted: Tue Apr 09, 2024 9:53 am
by flaggi
@burt
Trying honeypot together with hcapt seems like a good way to go as well.
I'm interested in trying that.

/J

Re: Any good way to Stop account creation by bots?

Posted: Tue Apr 09, 2024 10:05 am
by mhsuffolk
If you are using the Pro version of Phoenix I have found that, along with @burt's Maths Capture, installing the Check Email Reloaded Header tag and setting it to Extra email made a huge difference. One a week still gets through. This makes the bot fill in the email field twice.
Check email.JPG