The Signal.

Thoughts, technical deep dives, and editorial essays on building the future of signup verification.

ResearchJun 8, 2026

The 2026 State of SaaS Signup Fraud Report

A directional, evidence-based look at what's actually attacking SaaS signup forms in 2026 — disposable emails, VPN traffic, AI-bot signups, Gmail alias abuse, and free-tier infrastructure mining. Drawn from Vouchley verification telemetry plus the broader industry data.

Read the essay
The 2026 State of SaaS Signup Fraud Report
VPN Detection API for SaaS: A 2026 Implementation Guide
EngineeringJul 23, 2026

VPN Detection API for SaaS: A 2026 Implementation Guide

A VPN signup is not a fraud signal on its own — plenty of real, privacy-conscious users arrive over a VPN. Here's how to add a VPN detection API to your signup flow the right way: what it returns, VPN vs proxy vs datacenter vs Tor, scoring instead of blocking, and the false positives to plan for.

By Rohit KashyapRead
Disposable Email API: How to Block Temp Mail in Your Stack
EngineeringJul 23, 2026

Disposable Email API: How to Block Temp Mail in Your Stack

A static blocklist you downloaded six months ago already misses a quarter of active temp-mail providers. Here's how to block disposable email with an API instead — the response fields that matter, the one call to wire in, the edge cases, and build-vs-buy.

By Rohit KashyapRead
How to Prevent Fake Signups in 2026: The Full Playbook
EngineeringJul 16, 2026

How to Prevent Fake Signups in 2026: The Full Playbook

Detecting fake signups is half the job. Preventing them is a system — layered defenses, the right block-vs-verify decision, registration-bot handling, and monitoring. Here's the full playbook, with a checklist you can ship this week.

By Rohit KashyapRead
The Best IPQualityScore Alternatives for Signup Verification (2026)
ProductJul 16, 2026

The Best IPQualityScore Alternatives for Signup Verification (2026)

IPQualityScore is powerful, but its $99/month floor and platform breadth are more than most teams need. Here are the best IPQualityScore alternatives for signup and IP verification in 2026, compared honestly on price and fit.

By Rohit KashyapRead
Proxy Detection for SaaS Signups: A Practical Build Guide
EngineeringJul 16, 2026

Proxy Detection for SaaS Signups: A Practical Build Guide

Proxy-backed signups are how one attacker becomes a thousand fake accounts. Here's how to detect and score proxy traffic on a SaaS signup — the signals that matter, the code, the thresholds, and whether to build or buy.

By Rohit KashyapRead
AI Bot Signups in 2026: Why Your Existing Defenses Are About to Fail
EngineeringApr 26, 2026

AI Bot Signups in 2026: Why Your Existing Defenses Are About to Fail

AI agents now mimic human signup behavior — typing cadence, mouse jitter, even dwell time — at a cost of cents per account. Here's why traditional bot defenses break against agentic signup fraud, and the new layered approach SaaS teams need.

By Rohit KashyapRead
How Fake Signups Quietly Destroy Your Email Deliverability
EngineeringApr 25, 2026

How Fake Signups Quietly Destroy Your Email Deliverability

Fake signups don't just waste compute — they wreck your sender reputation. Here's how Gmail and Outlook decide whether your transactional email lands in the inbox or the spam folder, and how fake accounts move that needle in the wrong direction.

By Rohit KashyapRead
What Is a Signup Verification API? A Practical Guide for Product Teams
ProductApr 24, 2026

What Is a Signup Verification API? A Practical Guide for Product Teams

Signup verification APIs sit between your signup form and your database, scoring every new account in real time. Here's what they actually do, what they don't do, and how to evaluate one for your SaaS.

By Rohit KashyapRead
How to Prevent Free Trial Abuse in SaaS (Without Blocking Real Customers)
EngineeringApr 24, 2026

How to Prevent Free Trial Abuse in SaaS (Without Blocking Real Customers)

Free trial abuse silently burns your infrastructure and margins. Here's how to stop repeat signups and throwaway accounts in 2026 — without adding friction that hurts your conversion rate.

By Rohit KashyapRead
VPN and Proxy Detection for Signups: A Practical Guide for SaaS Teams
EngineeringApr 23, 2026

VPN and Proxy Detection for Signups: A Practical Guide for SaaS Teams

VPN signups aren't always bad — but they're disproportionately risky. Here's how to detect and risk-rank VPN, proxy, and Tor traffic on signup without losing legitimate privacy-conscious users.

By Rohit KashyapRead
Email Validation vs Signup Verification: What's the Difference and Why It Matters
EngineeringApr 22, 2026

Email Validation vs Signup Verification: What's the Difference and Why It Matters

Email validation checks if an address can receive mail. Signup verification asks whether the person behind that address is legitimate. Understand the difference and stop paying for the wrong problem.

By Rohit KashyapRead
How to Detect Fake Signups in Real Time: A Complete Guide for SaaS Teams
EngineeringApr 21, 2026

How to Detect Fake Signups in Real Time: A Complete Guide for SaaS Teams

Fake signups are the silent tax on every growing SaaS. Here's how to detect and block them in real time — without adding friction for legitimate users.

By Rohit KashyapRead
Disposable Email Detection: What Works, What Doesn't, and Why It Matters
EngineeringApr 18, 2026

Disposable Email Detection: What Works, What Doesn't, and Why It Matters

Disposable emails are the #1 indicator of low-intent signups. Here's a practical guide to detecting them — what works in 2026, what doesn't, and how to integrate detection into any stack.

By Rohit KashyapRead
Bot Signup Prevention: Why CAPTCHA Isn't Enough in 2026
EngineeringApr 15, 2026

Bot Signup Prevention: Why CAPTCHA Isn't Enough in 2026

CAPTCHA solved 2015. Bot farms solved CAPTCHA. Here's how modern SaaS teams actually stop bot signups — without adding friction for real users.

By Rohit KashyapRead

Subscribe to The Signal

Get the latest essays and technical deep-dives delivered directly to your inbox.

No spam. Unsubscribe anytime.