Use Case: Signup Screening

Reducing fake and bot-generated accounts at the point of signup.

SettingRecommendation
context"signup" — weights disposable domains, generated-looking local parts, and brand-new domains higher
mode"standard" for most flows; see Checking at Signup Without Blocking the Flow for when to use fast or full
PatternBlocking for paid/high-value signups, fully async for free tiers — see the same page for the decision guide

Routing the decision

  • allow → create the account with full access immediately
  • review → create the account, but require email confirmation before granting full access (trial credits, API keys, etc.)
  • block → reject at signup, or route to manual review for high-value accounts rather than a hard rejection

Further reading

  • How to Stop Fake SaaS Signups — the full reasoning behind this configuration
  • How to Prevent Free Trial Abuse — why address-level screening alone doesn't catch repeat-signup abuse, and what to pair it with
  • Checking at Signup Without Blocking the Flow — the three implementation patterns

We use Google Analytics to understand site traffic, and only load it if you accept — nothing runs before you choose. Signing in still stores a strictly necessary session token regardless. See the Privacy Policy for details.