Prevent Fake Signups & Stop Bot Accounts

// Backend signup handler (Node.js/Express example)
import axios from 'axios';

app.post('/api/signup', async (req, res) => {
  const { email, username, password } = req.body;
  const userIP = req.ip;

  try {
    // Call IPASIS API
    const response = await axios.post('https://api.ipasis.com/check', {
      ip: userIP,
      email: email
    }, {
      headers: {
        'Authorization': `Bearer ${process.env.IPASIS_API_KEY}`,
        'Content-Type': 'application/json'
      }
    });

    const { trustScore, signals } = response.data;

    // Define your risk threshold
    if (trustScore < 40) {
      return res.status(403).json({
        error: 'Signup blocked',
        reason: 'High-risk account detected',
        details: signals
      });
    }

    // Log suspicious signups (40-70) for review
    if (trustScore < 70) {
      await logSuspiciousSignup({
        email,
        username,
        ip: userIP,
        trustScore,
        signals
      });
    }

    // Proceed with normal signup flow
    const user = await createUser({ email, username, password });
    
    res.json({ success: true, userId: user.id });

  } catch (error) {
    console.error('IPASIS check failed:', error);
    // Fallback: allow signup but flag for review
    const user = await createUser({ email, username, password });
    await flagForReview(user.id);
    res.json({ success: true, userId: user.id });
  }
});