My SMS Check

I was vacationing in Morocco, obsessively checking my Stripe account everywhere - restaurants, tour vans, even on a camel.

On the toilet, I saw a surge of sales for my AI SEO tool. Excited at first, I soon realized it was a card testing attack.

Thousands of blocked transactions from similar email accounts (jake0001@gmail.com, jake0002...) and hundreds more flooding in.

A card testing attack is when black market actors test stolen credit cards. You can't keep the money - charges get reversed, and you face chargebacks. Too many, and Stripe bans you.

Worse, Stripe charges a fee even for canceled fraudulent charges. Thus, there's no limit to how much you can lose.

I tried rate limiting, captcha, and email verification. Nothing worked.

In the Sahara, I had to shut down new signups to stop the attacks.

Back home, I implemented a 1-time SMS verification with real number checks. No more attacks since.

I've used this trick on all my sites since. The slight friction is worth protecting against unlimited downside.

I made this product to so devs can easily protect their SaaS projects from this, and other types of attacks (free trial spam being a common one).

No annoying subscriptions. Pay once, use forever.

Check it out here: https://www.mysmscheck.com/ - early adopters get big discounts up to the first 100 users.