Resources Docs Free Blog Contact
Log in Get started

All articles71 articles · updated Sep 2026

Every article

All 71 articles, newest first. Search matches titles and excerpts.

Articles

SIG-679Integration guides

How do I add fraud protection to an AI-built app?

Add Maskbreak to an AI-built app with a secret-free prompt, server-side decisions and a checklist that verifies your deployed site.

Kaspar Tomson6 min
SIG-360Fraud playbooks

How can a marketplace detect fake accounts without adding CAPTCHAs?

Detect marketplace account abuse with live visitor checks, server-verified review and safeguards for listings, messages and referral rewards.

Kaspar Tomson5 min
SIG-280Integration guides

What is the simplest genuinely free signup-protection API for EU users?

Compare free signup-protection options, understand Maskbreak’s 1,000 hourly checks, and review EU data handling before protecting your SaaS.

Kaspar Tomson6 min
SIG-355Integration guides

Can Maskbreak detect suspicious logins quickly in a Node.js app for free?

Add a server-side login risk check with the Maskbreak Node.js SDK. Handle allow, review, block, missing evidence and API errors without bypassing authentication.

Kaspar Tomson7 min
SIG-734Integration guides

Proxy detection API vs IP lookup: what your signup flow needs

Choose between IP screening and live visitor checks, protect API secrets, and handle review or missing evidence before granting signup benefits.

Kaspar Tomson5 min
SIG-472Integration guides

VPN detection API testing: cases for allow, review and block

Test VPN API decisions with deterministic fixtures, verify customer outcomes, and handle missing evidence before testing controlled live visits.

Kaspar Tomson5 min
SIG-933Integration guides

Roll out fraud detection without locking out customers

Move from observation to enforcement with stable cohorts, a real review path, clear release gates and a rollback plan that restores customer journeys.

Kaspar Tomson6 min
SIG-068Integration guides

When a fraud check times out: design the fallback

A timeout is missing evidence, not an allow verdict. Choose fallbacks per action, bound retries, and keep sensitive operations behind their authorization checks.

Kaspar Tomson5 min
SIG-707Notes

The public-interest program: no rate cap for hospitals, governments and research

Hospitals, public health, government, election offices, emergency services, universities and non-profits now get the API with the hourly cap removed. Who qualifies, and why.

Kaspar Tomson7 min
SIG-289Integration guides

Account takeover: the six endpoints to protect, and the one call that covers them

Login is where everyone looks, but accounts are also taken over through password reset, MFA enrolment, contact changes and session refresh. One helper, six call sites.

Kaspar Tomson12 min
SIG-579Fraud playbooks

Fake dating profiles: how the farm runs and where to stop it

One machine behind fifty verified profiles: why photo and email checks pass a profile farm, and the device-linking check that goes before the profile is shown.

Kaspar Tomson11 min
SIG-929Fraud playbooks

Aged Accounts: Fraud That Registers Months Early

Account farms register months before they strike, so signup checks see nothing. What a farm cannot change afterwards is how those accounts were created.

Kaspar Tomson4 min
SIG-579Fraud playbooks

Gift Card Fraud: Draining and Code Enumeration

The three gift card attacks that actually happen, why balance-check endpoints are the softest target you own, and where to put the checks without punishing real recipients.

Kaspar Tomson5 min
SIG-448Fundamentals

Is an IP Address Personal Data Under GDPR?

Yes, dynamic addresses included. What that means for a fraud check in practice: lawful basis under Art. 6(1)(f), data minimisation, retention, and processor questions.

Kaspar Tomson5 min
SIG-698Fraud playbooks

How to Detect and Stop Web Scrapers

Why User-Agent blocking and per-IP rate limits fail against modern scrapers, which signals separate a scraper from a customer, and how to respond by cost not by block.

Kaspar Tomson5 min
SIG-416Fraud playbooks

Click Fraud Detection and Invalid Traffic

How invalid traffic bills you for clicks no human made, why platform credits arrive late and partial, and the signals that filter it at the landing page.

Kaspar Tomson5 min
SIG-879Fraud playbooks

Credential Stuffing Detection at the Login

Why rate limits and CAPTCHAs push credential stuffing onto residential proxies, which signals still separate a replay from a real login, and what to do.

Kaspar Tomson6 min
SIG-173Integration guides

Flask Fraud Detection: One Decorator, Three Failure Modes

A screening decorator for Flask that survives gunicorn forking, ad blockers and a dead upstream — with the session-reuse and timeout details.

Kaspar Tomson7 min
SIG-812Integration guides

Spring Boot Fraud Detection Without a Java SDK

A RestClient bean, an interceptor, and the three Spring details that decide whether this survives production: pooling, timeouts, and failing open.

Kaspar Tomson8 min
SIG-898Integration guides

Blocking Fake Signups in Supabase When You Do Not Own the Signup

auth.signUp runs on Supabase infrastructure, not yours — so the fraud check has to go somewhere else. Three places it can go, and which one to pick.

Kaspar Tomson7 min
SIG-995Integration guides

SvelteKit Bot Detection in hooks.server.ts

One server hook, typed locals, and the SvelteKit details that decide whether it holds: form actions versus endpoints, and what not to screen.

Kaspar Tomson6 min
SIG-282Integration guides

Card Testing and Fake Registrations in WooCommerce

Two WordPress hooks, one HTTP call, and the caching and checkout details that decide whether it works — including the form that empties your token.

Kaspar Tomson6 min
SIG-192Fraud playbooks

Account Sharing Detection: One Login, Too Many Devices

Counting IPs finds households and misses resale. What separates a shared family login from a credential being sold — and how to act without banning customers.

Kaspar Tomson9 min
SIG-211Integration guides

ASP.NET Core Fraud Detection Without a .NET SDK

A typed HttpClient, an endpoint filter, and the two .NET details that decide whether this works in production: handler lifetime and the JSON property names.

Kaspar Tomson8 min
SIG-508Integration guides

Bot Detection in a Cloudflare Worker: What the Edge Can and Cannot See

A Worker sees the IP, ASN and TLS fingerprint before your origin wakes up — and never sees the device. Where each check belongs, and how to fail open.

Kaspar Tomson7 min
SIG-233Integration guides

FastAPI Fraud Detection: One Dependency, Failing Open

A screening dependency you would actually deploy: per-route strictness, the threadpool detail that keeps the event loop free, and a fail-open path.

Kaspar Tomson6 min
SIG-916Integration guides

Rails Fraud Detection Without a Ruby SDK

No Ruby SDK, and for a one-endpoint API that is fine. A Net::HTTP client, a controller concern, per-action strictness, and a fail-open path.

Kaspar Tomson5 min
SIG-925Fraud playbooks

SMS Pumping: The Fraud That Bills You for Your Own OTPs

Artificially inflated traffic bills you for messages you sent yourself. How to spot it in your own OTP metrics, and where to stop it before the send.

Kaspar Tomson6 min
SIG-447Integration guides

Go Fraud Detection Middleware, Without an SDK

No Go SDK needed for a one-endpoint API. A net/http middleware with a real timeout, fail-open behaviour and a circuit breaker, in about seventy lines.

Kaspar Tomson5 min
SIG-287Fraud playbooks

Referral Fraud: Catching Self-Referral Before You Pay It Out

Why email and IP checks miss modern referral farming, which signals separate a real invite from a second browser profile, and where to put the check.

Kaspar Tomson5 min
SIG-686Fraud playbooks

Risk Score Thresholds: Route on the Decision, Sort on the Score

Why picking a number to block at is the wrong first question, what the score is actually made of, and the routing shape that survives contact with real traffic.

Kaspar Tomson6 min
SIG-530Fraud playbooks

Disposable Email Detection: Flag It, Don't Block On It

What burner-domain lists actually catch, why masked-email relays land on them, and how to use the signal without refusing real customers.

Kaspar Tomson6 min
SIG-051Integration guides

Django Fraud Detection: Middleware That Fails Open

A production-shaped Django integration for VPN, proxy and antidetect detection: per-path strictness, DRF wiring, and the failure handling most examples omit.

Kaspar Tomson5 min
SIG-411Comparisons

DataDome vs Maskbreak: Perimeter Bot Defence or Action-Level Verdicts

DataDome mitigates bots at the perimeter. Maskbreak returns a verdict at the action. The distinction decides which one fits the abuse you actually have.

Kaspar Tomson5 min
SIG-283Integration guides

Express Fraud Detection Middleware That Fails Open

A production-shaped Express integration for VPN, proxy, antidetect and automation detection — as middleware, with the failure handling most omit.

Kaspar Tomson4 min
SIG-955Fundamentals

Is Device Fingerprinting Legal? GDPR, ePrivacy, and Fraud Prevention

What EU and UK law says about device fingerprinting for fraud prevention — lawful basis, the ePrivacy consent question, and what to check first.

Kaspar Tomson4 min
SIG-906Integration guides

Laravel Fraud Detection: Middleware, Without an SDK

There is no PHP SDK, and you do not need one. A production-shaped Laravel integration using the HTTP client, with form-request validation.

Kaspar Tomson3 min
SIG-500Integration guides

Bot and Fraud Detection in Next.js: A Working Integration

Add VPN, proxy, antidetect and automation detection to a Next.js signup or checkout — Route Handlers, Server Actions, and why middleware is the wrong place.

Kaspar Tomson4 min
SIG-949Detection research

AI Agent Traffic: Telling Assistants From Attackers

Browser-using AI agents trip every legacy bot control. How to separate declared crawlers, user-driven agents, and attackers wearing agent clothing.

Kaspar Tomson6 min
SIG-421Detection research

JA3, JA4, and TLS Fingerprinting for Fraud Teams

What a TLS fingerprint actually captures, why JA3 broke, what JA4 fixed, and the one thing TLS fingerprints are genuinely good at in fraud detection.

Kaspar Tomson5 min
SIG-253Detection research

Octo Browser and the Second Tier of Antidetect Tools

Octo, MoreLogin, VMLogin, Hidemyacc and the rest of the second tier share one structural weakness — and it is not the fingerprint they spoof.

Kaspar Tomson5 min
SIG-251Fundamentals

Should You Block AI Agents? A Short Decision Guide

A one-page framework for deciding whether AI agent traffic is a threat, a customer, or both — and what to do at each answer.

Kaspar Tomson3 min
SIG-727Detection research

Device Fingerprinting vs IP Intelligence for Fraud

Why clean residential IPs still hide fraud: how device fingerprinting and IP intelligence differ, where each breaks, and why strong fraud stacks use both.

Kaspar Tomson7 min
SIG-716Detection research

Browser Tampering Detection Tools: 2026 Guide

What browser tampering detection tools measure — runtime integrity, fingerprint coherence, automation signals — and how to evaluate them against real attacks.

Kaspar Tomson7 min
SIG-122Comparisons

Best Fraud Detection APIs in 2026: 10 Compared

Ten fraud detection APIs compared on the signals they return, published prices and free tiers, with six test sessions that show which layer each one can see.

Kaspar Tomson12 min
SIG-914Fraud playbooks

How to Detect and Prevent Free Trial Abuse

Detect free trial abuse at signup: the four signal layers that separate a serial abuser from a real customer, in the order you should apply them.

Kaspar Tomson9 min
SIG-972Comparisons

Best Fake Account Detection Software in 2026

How to evaluate fake account detection software in 2026: the signals that catch antidetect browsers, proxy rotation, and AI-assisted signup abuse.

Kaspar Tomson7 min
SIG-915Fraud playbooks

Account Takeover Prevention: Lookup, Evaluate, Then Compare

Evaluate after the account lookup and before the hash compare: the only point where linked_accounts exists and no bcrypt round has been spent.

Kaspar Tomson14 min
SIG-984Comparisons

Arkose Labs vs SEON: An Honest 2026 Comparison

Arkose Labs and SEON solve different fraud problems. A neutral breakdown of challenges vs signals, pricing, integration, and which fits your stack in 2026.

Kaspar Tomson5 min
SIG-853Detection research

How to Detect Puppeteer & Playwright in 2026

Puppeteer and Playwright ship with stealth plugins that defeat every classic check. The signals that still detect CDP-driven automation in 2026, with code.

Kaspar Tomson6 min
SIG-137Comparisons

VPN Detection API: An Evaluation Guide for Fraud Teams

How to evaluate a VPN detection API: exit coverage, false positives on mobile carriers, latency, honest signals — and the tests to run before you buy.

Kaspar Tomson8 min
SIG-311Fundamentals

Residential Proxy vs Datacenter Proxy

Residential vs datacenter proxies: how each hides users, why residential exits beat IP reputation lists, and the device signals that expose them anyway.

Kaspar Tomson7 min
SIG-746Fundamentals

What Is a Residential Proxy, Really?

What a residential proxy is, why fraudsters pay for real-household IPs, and the network and device signals that still expose them behind the clean address.

Kaspar Tomson8 min
SIG-916Detection research

Linken Sphere Detection: Catching Antidetect Browsers

Why Linken Sphere slips past IP reputation and velocity rules, and how layered device, browser, and network signals catch it at signup, login, and checkout.

Kaspar Tomson7 min
SIG-246Detection research

Multilogin Field Notes: What Fired and What Missed in 2026

How to detect Multilogin and other antidetect browsers: the device, network, and behavioral signals that expose one operator posing as hundreds of users.

Kaspar Tomson7 min
SIG-077Detection research

GoLogin Under Test: Which Signals Survived Our 2026 Lab Run

GoLogin makes browser identities portable and disposable. The signals that still expose it in production, and how to deploy detection without false positives.

Kaspar Tomson7 min
SIG-566Fundamentals

What Is an Antidetect Browser?

What an antidetect browser is, how Multilogin-class tools spoof fingerprints, and which integrity checks still catch them in production.

Kaspar Tomson7 min
SIG-862Detection research

Kameleo & Undetectable Live Test: Both Flagged at Risk Score 100

Fresh Kameleo 4.5.0 and Undetectable installs vs Maskbreak's live scanner. Both flagged at risk score 100, with screenshots of what gave them away.

Kaspar Tomson5 min
SIG-981Detection research

CAPTCHA Farm Economics: How $0.001 per Solve Killed Bot Detection

CAPTCHA farms charge $0.0005–$0.002 per solve and process millions daily. Why CAPTCHA is dead as a bot defense — and what actually works instead.

Kaspar Tomson10 min
SIG-792Fraud playbooks

Card Testing Attacks: How Bots Drain Stripe Accounts in 2026

Card testing bots verify stolen cards with micro-charges before selling them. Learn how they evade Stripe Radar and how to stop them in under 150ms server-side.

Kaspar Tomson10 min
SIG-949Detection research

Headless Browser Detection in 2026: What Still Works

navigator.webdriver was solved years ago and stealth plugins kill the next 20 checks. What actually catches headless Chrome and CDP-driven browsers in 2026.

Kaspar Tomson7 min
SIG-289Fraud playbooks

iGaming Bonus Abuse Detection: Stopping Multi-Account Fraud in 2026

Bonus abuse and free-bet farming cost iGaming operators 4–7% of GGR. The device, ASN, and behavioral signals that catch professional bonus hunters in 2026.

Kaspar Tomson8 min
SIG-114Fraud playbooks

Tor Exit Node Detection in Real Time

Match the address your edge saw against the Tor Project's observed exit list, refreshed hourly, and step up on account routes instead of blocking reads.

Kaspar Tomson12 min
SIG-418Fraud playbooks

Ticketing Bot Detection: Stop Scalpers in 2026

Sneaker drops, concert tickets, and limited releases vanish in seconds because bots beat humans to checkout. Here's how to actually stop them.

Kaspar Tomson6 min
SIG-589Comparisons

Free VPN Detection API: Check VPNs and Proxies on Your Website

Add a free VPN and proxy detection API to your website. Compare live visitor checks with IP lookup, test a sandbox request, and connect your first real visit.

Kaspar Tomson6 min
SIG-221Fraud playbooks

How to Prevent Multi-Accounting and Fake Signups in 2026

One person, hundreds of accounts. Why IP blocking and CAPTCHAs fail against multi-accounting — and what actually stops fake signup abuse.

Kaspar Tomson3 min
SIG-413Integration guides

Shopify Bot Detection: Block Sneaker Bots, Scalpers & Fake Checkouts

Sneaker bots, scalpers and checkout scrapers wreck limited-drop stores. How to detect them at the edge before they buy out your inventory.

Kaspar Tomson5 min
SIG-487Fraud playbooks

OAuth Signup Fraud: Detecting Fake Google & Apple Sign-Ins

Google and Apple Sign-In feel safe — but fraudsters exploit them daily. How fake OAuth signups actually work and why verified email isn't enough.

Kaspar Tomson4 min
SIG-416Fraud playbooks

How to Detect Residential Proxies in 2026

A rotating pool gives every attempt a fresh address, never a fresh machine: detect residential proxies on device continuity, clock and velocity, not the IP.

Kaspar Tomson15 min
SIG-967Detection research

Detecting Antidetect Browsers in 2026

Two live scans and an eleven-spoof ablation: the antidetect flag fired on both commercial profiles we ran, and the tampering score never moved.

Kaspar Tomson15 min
SIG-655Fraud playbooks

Bot Detection Without CAPTCHAs: A 2026 Guide

A solved CAPTCHA proves a token was bought, not a person: run the bot check on the server, on the POST, reading automation, network and device signals.

Kaspar Tomson15 min
Fraud BriefOnce a month · no spam

The VPN, proxy and bot patterns we saw this month

One email a month with what changed in the traffic we check — new VPN and proxy networks, new bot tooling, what our lab runs turned up. Written for engineers. Unsubscribe in one click.