Fake signups: What to Do

Fake signups can occur on any website mostly due to "bots" which are automated by hackers. WordPress websites are often targeted by them. 

Steps to Prevent Fake Signups in MailPoet

Enable signup confirmation in your  MailPoet > Settings > Signup Confirmation. This option is turned on by default. When using MailPoet Sending Service, signup confirmation is mandatory. MailPoet never sends any emails to unconfirmed subscribers;
Add a Captcha to your subscriptions forms directly in MailPoet;
If you enable sign-ups in the comments ( MailPoet > Settings > Basics): enable Akismet or similar anti-spam for comments;
If you enable sign-ups in registration form ( MailPoet > Settings > Basics): ensure you have a protection set or just disable this option;
Keep the Inactive Subscribers feature enabled.

Important: if you've imported your subscriber's list, please check this article: Checklist before importing subscribers

Fake WordPress Users Signups 

The most common form of fake signups occurs in WordPress and not in MailPoet. Nefarious bots register as WordPress users which in turns adds these fake users to the default MailPoet list "WordPress Users".  

  1. Check your WordPress users for any suspicious users, possibly with the same email addresses;
  2. Check in your database, with phpMyAdmin, if there are no hidden WordPress users (common hack);
  3. Check in your database, in the table "..._mailpoet_subscribers" if there are any suspicious email addresses.

Read more: 

MailPoet's Bot Protection Mechanism on Its Forms

MailPoet implements preventive measures by default to prevent bots from subscribing to MailPoet's forms repeatedly. This is mitigated Email Bomb type of attacks which became popular in 2017.

When multiple signups occur quickly, MailPoet's forms enforce a delay in seconds between each signups using the same IP address. The message " You have to wait xxx seconds before you can sign up again." will be displayed.

The more signups occur, the longer the delay in seconds will be enforced. 

This option cannot be turned off.

Did this answer your question? Thanks for the feedback There was a problem submitting your feedback. Please try again later.