2

Catch fake details, block throwaway emails, spot problem IPs

 1 year ago
source link: https://www.producthunt.com/posts/danger-2
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
neoserver,ios ssh client

Support is great. Feedback is even better.

"We're really keen to know what other risk factors you'd like us to surface? Also, what would you like to see in addition to the API, i.e. would you value a tool to review risk scores in a UI?"

The makers of Danger
guest-user-avatar.png?auto=compress&codec=mozjpeg&cs=strip&auto=format&w=36&h=36&fit=crop
Sort by:

Thanks for being here with us!

Like many a startup, Danger was built to meet our own needs. Whilst running a telecoms app, we found it really hard to tell a genuine customer from a scammer. The fraud tools provided by Stripe were helpful, but by no means broad enough to help us out.

We needed something to help us look through the details a user provides to us and see the real picture. Is that a real email address? By "real", we know it probably works as it's a @gmail.com, but is it a **real** email, one used in the real world by a real person.

So we built Danger. It's helped us to save time manually reviewing sign-ups, and most importantly, we're saving money. We can now sift between the good, bad, and the ugly.

Now we're opening up Danger for anyone to use. We've tried to make it simple, developer-friendly, and more accessible than other solutions on the market, whilst still being just as powerful. There are big, big plans in the pipeline too.

We're open to feedback, let us know how you'd like to see the platform develop in the comments here. What happens next depends a LOT on you.

@john_jackson12! For sure, we're never going back to dealing with those pesky issues again. Keep up the great work!
Congrats on your launch! Your tool looks really good and polished. I was wondering if it has the capability to identify bot traffic or simple injection inputs, fake clicks on webpages. Could prove to be an useful security tool then!
@sambit_bhaumik Hi Sambit, we are planning to identify bot traffic as a further risk input (to enrich IP data) in the near future. For now, it analyses the name, email, IP, and phone number that a person provides. Thank you for your question!
Very interesting product, I've got a question though: let's say your product catches up and every major tech company start using it to filter new potentially fraudulent accounts? Especially the 20 services you check to verify the legitimacy of the email address... Then it'd be impossible for new users to register anywhere your product is used. Similarly, what if someone uses their own domain for their email address and your product deems it suspicious, then they'd have to create an email with a mainstream email provider, except that won't work either because the address is too new and/or not registered anywhere else yet. How do you plan dealing with these cases? Could there be a way to authenticate the email address your product deems suspicious? You could have a tool for that and the error message would offer the customer/user to verify their email with it, but such tool would be susceptible to the same issues you're trying to fight against with your product. Or maybe I'm thinking too hard about this?

@emnificent Thanks for the question.

An email account with no history would contribute a lot towards the risk but wouldn't in itself be a reason for turning the customer down (unless you wanted that). But normally, a high risk score may cause a review. You could also decide to allow private domains, but disallow free emails with no history.

Of course scammers could create accounts on those services but it puts the bar quite high in terms of effort needed, and along with other parts of the risk, it would still be obvious it's a bad user.

Appreciate the idea about further verification of the email, we'll consider that too.

The main goal of the email reg check is to make a decision about the likelihood of the email being newly created.

Thank you for the feedback! We really appreciate it.


About Joyk


Aggregate valuable and interesting links.
Joyk means Joy of geeK