Re:Scammers signed up, scammed us of $870 in 15 minutes
by Nextgrid on Tuesday May 26, 2020 @01:27PM
(#23313933)
I'm curious, why did you have a phone verification feature to begin with; what would've been the impact of unused accounts being created? To me it seems like the verification feature did more harm than good in this case.
[ Parent
| on HN ]
Re:Scammers signed up, scammed us of $870 in 15 minutes
by kaushikt on Tuesday May 26, 2020 @01:34PM
(#23314037)
Phone verification is NOT mandatory. However, Spike.sh is a simpler alternative to PagerDuty which means we make calls when there are important incidents. Not calling might have serious consequences.
Knowing that Phone call is important, we needed to verify it. However, making phone call to verify is NOT a good idea.
We should have sent an SMS but getting an Alphanumeric sender ID took some time and we wanted to ship quickly.