Help with spam registrations

[tcmw]

Hey everyone.... hoping I can get some help regarding new user registrations.

I've had to keep user registrations off because I'm getting a ton of spam accounts being made. However, being a message board, that kinda defeats the purpose don't.

I have reCAPTCHA v2 running but that hasn't helped. The rest of the XenForo settings are default.

Not sure which direction to take this but I also don't want to buy a subscription to fix the problem.

Thank you

 

[Mr Lucky]

getting a ton of spam accounts being made. However, being a message board, that kinda defeats the purpose don't.

We don’t use recaptcha, just a good Q and A which seems to work well.

Let them register and then ban them when they try to post, ie at the point of post approval.

 

[Suzanne O]

Please use @Xon's sign up and abuse addon and his standard library.

 

[Alvin63]

I switched to Cloudflare Turnstile - if you have a Cloudflare account. Worked very well.

 

[Jwrbloom]

We don’t use recaptcha, just a good Q and A which seems to work well.

Let them register and then ban them when they try to post, ie at the point of post approval.

At that point it just becomes work.

 

[Mr Lucky]

Let them register and then ban them when they try to post, ie at the point of post approval.

At that point it just becomes work.

Except that it happens so rarely it isn’t really work.

 

[Zwielicht]

About how many spam registrations are you getting?

I have new registrations just go straight to the approval queue for the moment. My team and I have a lot of experience identifying these, so it's not a big deal for us to do this, although our forum is still relatively new, so we expect these spam registrations to go up over the next couple of months.

When I previously worked on a very large Xenforo forum, these spam registrations were typically handled roughly the same way, believe it or not. Genuine users were automatically approved once their e-mails were verified, but some users caught by the filters had to be manually approved.

Other than that, identify what they have in common. For example, if they're all signing up with 10 minute mail or one of those websites, it's pretty safe to block registrations with those e-mail addresses as a genuine user is extremely unlikely to be using an e-mail address that lasts for 10 minutes.