2
0 Comments

Best practice when allowing users to invite other users?

I’m working on a product that’ll allow a company owner to invite multiple team members to their company account, by adding their email addresses. Like services such as Asana and Figma that let you invite people to a project you’re working on.

I’m concerned that if I allow people to add many email addresses to send invitations to, it opens the possibility of misuse by hackers who could add tons of random email addresses causing my product to send invitations to unsuspecting recipients, who’d mark those emails as spam, hence blacklisting me as a sender.

Are there establishes and proven ways to avoid this problem?

P.S: It’s possible for these invited team members to have different email address domains, so I can’t restrict invitations to email addresses belonging to a certain domain name.

on March 27, 2020