500 signups overnight
You give every new account 50 free AI credits. You wake up to 500 new signups and no new customers.
This answers: How do I stop fake accounts abusing my free tier? No coding needed. 2 quick decisions.
- Costs and abuse
- Who is signed in
Checking your access…
How do I stop fake accounts abusing my free tier?
Make farming expensive and real signups easy: verify email before granting free credits, normalise addresses such as Gmail dot variants, signups per IP address, and add a bot check. No single step stops a determined abuser; several small ones together make it not worth the effort.
Breaks at Auth service: Credits granted before verification
How it works
| Day | People | Bots |
|---|---|---|
| Mon | 180 | 260 |
| Tue | 210 | 300 |
| Wed | 160 | 9400 |
| Thu | 190 | 12100 |
| Fri | 230 | 14800 |
| Sat | 120 | 13300 |
| Sun | 110 | 11900 |
Why AI tools write this bug
AI-built signup flows usually grant credits the moment an account exists, which turns every new account into free money for anyone with a script.
How to fix it
- Grant free credits only after email verification.
3 more steps, and a prompt that checks your own app for this bug. Part of Pro.
UnlockCommon questions
- Is a CAPTCHA enough?
- No. Paid services solve CAPTCHAs for bots. Use it as one layer among several.