Free trial abuse detection that catches the same user twice.
Trueguard prevents free trial abuse and multi-accounting by identifying the same user returning under a different identity. Device fingerprinting, residential-proxy detection and disposable-email analysis combine into one real-time risk score, so trial recyclers are stopped at signup, even after a cache clear or a VPN switch.
No credit card required - free tier availableSignup verification
Trial recycler>70M Verifications
Signup events scored across customer products to date.
25% Of users
On some products, up to a quarter of signups are fraudulent or recycled.
>90% Detection
Repeat signups identified before they consume free-tier capacity.
Signs your free tier is being farmed.
Free-tier abuse rarely announces itself. It shows up as costs you cannot attribute and conversion numbers that do not move. If two or more of these look familiar, you need to stop free trial abuse before it grows.
See how detection worksInfrastructure cost outpaces revenue
Compute, storage and API spend grow with signups that never convert.
Trial-to-paid conversion is flat
A growing share of trials are the same people starting over instead of new prospects.
Signups cluster on a handful of domains
Disposable providers and plus-address aliases show up again and again in your CRM.
Manual review is a standing task
Someone on the team spends hours a week deciding which accounts are real.
How it works
Free trial detection, from page load to rule action.
Abusers clear cookies, open incognito windows and switch VPNs to look new. Free trial detection correlates the signals that survive all three, then hands your backend a score and a decision before the account exists.
Step 1
Device fingerprinting
Device fingerprinting for free trial abuse prevention builds a durable ID from browser, hardware and JA4/TLS network characteristics. It survives cookie clears, incognito sessions and VPN or proxy setups, so one person using ten emails still reads as one device.
Learn about JA4 and JA4T fingerprintsStep 2
Network and email correlation
Residential proxy detection covers VPN, Tor and datacenter origins too, plus IP velocity and reputation, checked alongside disposable and alias email domains from a continuously updated registry.
Try the VPN and proxy checkerStep 3
Your rules, your action
Design rules your way - block the signup, hold it for review, withhold the trial, or let it through and flag it. Every decision returns in the API response, so nothing needs a dashboard visit.
Read the Event API referenceOne signal set, four problems it solves.
Free trial detection
Identify when a new trial request comes from a device, network or email pattern that has already had one. The check runs before provisioning, so a recycled trial never gets created.
Free tier detection
Keep a genuinely free plan open without paying for the people gaming it. Trueguard tells you which free-tier accounts belong to one person so quotas apply per human, not per email address.
Multi-accounting detection
Multi-account detection software links accounts that share a device ID, JA4 fingerprint or proxy path even when the email, name and payment details differ. You see the cluster, not twenty unrelated users.
Trial recycling and repeat signups
Catch the loop of expire, clear, re-register. Device history persists across sessions, so the eleventh attempt is as visible as the second.
Running into bots and scripted registrations too? See fake account detection, or disposable email detection for temporary-mail signups specifically.
What basic checks miss.
Email validation, a CAPTCHA and an IP blocklist each stop one narrow behaviour. Trial abusers route around all three because none of them know whether the person has been here before.
| Abuse pattern | Trueguard | Email validation | CAPTCHA | IP blocklist |
|---|---|---|---|---|
| Same device, new email address | ||||
| Re-signup after a cookie clear or incognito session | ||||
| Residential proxy or VPN rotation | Partial | |||
| Disposable and plus-address aliases | ||||
| Scripted or automated registrations | ||||
| One person across twenty trials |
Check if your product is targeted by temporary emails.
Enter your domain to see how many of your emails landed in public disposable inboxes we monitor around the clock.
Example report
Live in an afternoon.
Install the JavaScript snippet to collect a verification ID on your signup page, then call one REST endpoint from your backend. You get the risk score, the matched signals and the rule action in the response.
POST /v2/event
{
"eventId": "0198b326-025b-7c30-8605-b99796c5e953",
"action": "challenge",
"scores": { "risk": 0.65, "bot": 0.2 },
"signals": {
"disposable_email": {},
"multiple_accounts_per_device": {}
},
"ip": {
"address": "1.2.3.4",
"privacy": { "vpn": true, "proxy": false, "datacenter": false, "tor": false }
},
"email": {
"email": "trial+7@mailinator.com",
"disposable": true
},
"fingerprint": {
"identifier": "7f56c04d-4652-471b-b5dd-426ad3bd9504",
"incognito": true
}
}One snippet, one endpoint
No SDK sprawl and no changes to your auth flow. Drop the script in, call the API where you create the account.
Decide in your own code
Trueguard returns the score and the signals. Whether that blocks, throttles or flags the account stays your call.
No friction for real users
Detection is passive. Genuine signups see nothing - no CAPTCHA, no extra step, no added latency they can notice.
The cost of leaving it alone.
10-60 hrs
per week
Support and manual review overhead
1-3 FTEs
ongoing
Engineering time on in-house heuristics
$5K-$75K
per month
Infrastructure overages from abuse traffic
$25K-$200K
per year
Conversion revenue lost to recycled trials
Frequently asked questions.
Free trial abuse prevention, multi-accounting and what detection does to your signup flow.
Keep reading
Disposable email detection
Block temporary and alias inboxes at signup with a continuously updated domain registry.
Fake account detection
Stop bot registrations and scripted signups before they reach your database.
What are JA4 and JA4T fingerprints?
How TLS-level fingerprints identify a device even behind a VPN or a fresh browser profile.
