Large Number of Fake Accounts

[thegoodlifestore]

We have a website that is receiving an INSANE amount of fake accounts being set up daily. There is a reCAPTCHA code on the registration page, but that hasn't slowed them down at all. I installed the Delete Spam Account add-on from The Software Guy and that helps with cleaning the bad accounts out easily, but it's now a task I have to do multiple times a day. Is there any good solution for blocking these kinds of sign-ups?

https://www.platinumpapersstore.com/...create_account

The site is running:
Zen Cart 1.5.7c
PHP 7.2

The only add-ons running on the site are the Delete Spam Customers and reCAPTCHA ones.

[balihr]

It's probably gonna require a bit of modification because it doesn't seem to be an out-of-the-box coverage, but here. I did build it for that exact purpose, although rules change every day so it might not cover your case without adding some new rules. If you like the plugin and the concept, please post in the official support thread for more info on how to add new rules.

[thegoodlifestore]

I will check into this and give it a try!

[mshultise]

I will check into this and give it a try!

I used to have one account being built across many Zen-cart installations. All the data was the same except for the email account which varied.

I finally just went to the Create_Account.php about line 76 and just before:

if (ACCOUNT_NEWSLETTER_STATUS == '1' || ACCOUNT_NEWSLETTER_STATUS == '2') {

and just added the brute-force check for the name. If it and the zipcode matched it just reported an error and quit.



if ($postcode == "10004" && $firstname == "john" && $lastname = "doe") {
$error = true;
$messageStack->add('create_account', "Database Corruption. Unable to create accounts at this time.", 'error');
}


You could do the same because all the entries you mentioned appear to have Google as the company name.

[att_mike]

I had to tweak that slightly to get it to work, but it's a simple DIY solution to the 60 plus fake accounts per day I have been getting recently...

if ($company == "google") {
$error = true;
$messageStack->add_session('create_account', "Error. Invalid email address or password.", 'error');

You can change the error message to whatever you like, highly unlikely to be read by a real customer!