You may also notice that short text messages are sent to similar numbers often with similar endings or look similar Additionally you may notice non-standard directions of sent messages. Your business operates locally in are sent to Asia or South America - this should automatically give you food for thoughtBest practices for preventing SMS traffic pumping fraud Disable geographic permissions for unused countries Ensuring that countries you do not intend to send messages to are disabled will reduce the likelihood of traffic skimping scams.
SMS geographic permissions can be controlled on your Email Marketing List account just enable Traffic Cost Protect from SerwerSMS within the Shield ecosystem. Enable Traffic Cost Protect Set speed limits Make sure your app will not send more than one message every X seconds to the same range of mobile numbers or prefixes. Implement rate limits by user IP address or device ID. You can use a CDN like Cloudflare for this or implement modules on your web server like Nginx and Apache for basic rate limiting.
Rate limits may not prevent % fraud but they will significantly reduce the potential damage. Detect bots and refresh the user experience to prevent them Libraries such as botd or CAPTCHA Completely Automated Public Turing test to tell Computers and Humans Apart can help detect and stop bot traffic. Small changes to the user experience such as making sure users confirm their email address before signing up for FA introduce some friction something that slows down or causes more user engagement for legitimate users but can discourage automated scripts and bots.
發表於 2023-12-10 14:06:24
