How do you all block fraudulent new signups from Nigeria etc?
 

I run a hookup site thats free to join and members pay if they want more messages, watch videos etc. Everyday I get fake signups where they come in, post fake pictures, and try to lure guys to Yahoo/Gmail then work on them to send them money, plane ticket, etc.

It used to be easy to discover them but now their cloaking is so good they will say theyre in Chicago and their ip checks out. Makes it hard to find them.

Do you know any way to identify and block these fake accounts before they can sign up, or boot them once they're in? Ill get any software.
I have a Captcha but they still able to sign up. thanks

Good luck to you Mr. Aurelius

Are you blocking known proxy lists?

Thanks guys, I will ask my admin.
Im going to hire a programmer to put some more security in place and didn't know what solution to ask him to implement.

:thumbsup TOR too.

Those nginx includes above are in reference to IP Geolocation and Online Fraud Prevention | MaxMind of whom are the only show in town in my book but offer a very nice platform that is likely the most accurate in the public sphere. You can always fall back on coordinates. Longitude and latitude and the like. It's what everyone uses who wants an independent custom solution.

You need interactive ip checking - that means, even if user uses High anonimity aka socks proxy, you can still detect real ip by checking over flash or java, as flash is not passing proxy unless connection is done over VPN. There is also javascript detect called WEBRTC, which detect real ip even if VPN is used, unless user using browser extension which blocks WEBRTC. In case if user have javascript/flash/java disabled, then you dont want such user anyway.

Try Maxmind.

This... $10 per like 50K queries and should easily identify the proxies.

Pretty easy to spot based on ip address owner too. For example: comcast, Verizon etc = real person. Digital ocean, isprime etc = hosting co / proxy \ vpn.

I'v seen bots on ordinary isp's as well, even on mobile carrier isp's.

Not so easy (you block some legitimate user, and you don't get all the nigerians), but helps.

That is interesting, good to know.