Re:Detect up to 1327 disposable email providers with MailChe...
by zrail on Sunday September 27, 2015 @09:30AM
(#10286422)
I built this kind of check into my ecommerce sites for high-value items. They're disproportionally susceptible to fraud and carding for some reason, and implementing a "no free email provider" check has cut fraud on those items to zero.
Re:Detect up to 1327 disposable email providers with MailChe...
by mmccaff on Sunday September 27, 2015 @09:51AM
(#10286472)
Yes, this. Processing fraudulent cards can result in a costly sum of chargebacks for the seller, and a fake email address is a very strong indicator that the person is a fraudster. Other services like Maxmind minFraud consider the email address and many other attributes when ranking the likelihood that the order is coming from a fraudster. It doesn't mean that you have to disallow the order from being saved (or whatever), just that you might want to flag it for manual review before processing the CC to capture payment.
Re:Detect up to 1327 disposable email providers with MailChe...
by mynamesgeneric on Sunday September 27, 2015 @09:32AM
(#10286430)
I work at a financial institution and disposable e-mails are used by fraudsters all of the time. This is certainly better than my current blacklist.
Re:Detect up to 1327 disposable email providers with MailChe...
by JupiterMoon on Sunday September 27, 2015 @11:47AM
(#10286889)
Do you blacklist gmail and hotmail addresses as well? It takes 5 minutes to put a throwaway gmail account together.
Re:Detect up to 1327 disposable email providers with MailChe...
by mapt on Sunday September 27, 2015 @10:25AM
(#10286587)
I expect blocking GMail, Hotmail, & Yahoo Mail also cut your conversion rate close to a factor of zero of what it would otherwise be.
Re:Detect up to 1327 disposable email providers with MailChe...
by jks on Sunday September 27, 2015 @10:53AM
(#10286690)
Here's how that might happen: http://mailinator.blogspot.com/2011/05/how-to-get-gmailcom-b...
Re:Detect up to 1327 disposable email providers with MailChe...
by zrail on Sunday September 27, 2015 @11:17AM
(#10286781)
Nope. The blocking is only active on certain products over $500 that don't make sense for non-companies to buy.
Re:Detect up to 1327 disposable email providers with MailChe...
by JupiterMoon on Sunday September 27, 2015 @09:58AM
(#10286498)
This point is orthogonal to the OP's.
Re:Detect up to 1327 disposable email providers with MailChe...
by zrail on Sunday September 27, 2015 @10:04AM
(#10286523)
OP's point as I understand it is "there is no circumstance where you need this, because you're either providing value or you're shit."
My point is that there are legitimate circumstances where you are providing value but in a way that people take advantage of for unrelated fraudulent purposes.
Re:Detect up to 1327 disposable email providers with MailChe...
by westi on Sunday September 27, 2015 @09:21AM
(#10286403)
Except you probably do need this if your site allows posting of user generated content, because spammers love these throwaway email addresses.
Re:Detect up to 1327 disposable email providers with MailChe...
by Menge on Sunday September 27, 2015 @10:07AM
(#10286533)
Spammers who bother with email based registration sites at all, often take the time to routinely acquire one address from a major free provider and use it everywhere they can't use a throwaway as well as get naive people to send email to it.
For other people who kind of don't trust your site, its future, or its security, but are too lazy to create extra accounts, you are forcing them to do a full evaluation in a way that adds additional weight to the possibility the site is an actual data broker today instead of an existential spam threat.
Personally, if I decided a site was bellow the threshold for my real email on an initial encounter and then I saw it perform this kind of detection, I wouldn't touch the site again.
So, if you use this, you're a site who wants a real deliverable address for some reason, but which doesn't offer enough benefit to the user to naturally compel them to share one. Put differently, if you need this, you're precisely the kind of site that shouldn't get my real address.
All that this script means is that I'm going to leave your site unregistered and frustrated, and will mentally bookmark your domain as "those twits who force you to sign in and creepily want an actual address".