Cloudflare is launching Account Abuse Protection in Early Access, a suite of fraud prevention tools that go beyond bot detection to address human-driven account abuse. New capabilities include disposable email checks, email risk scoring (low/medium/high tiers), and Hashed User IDs — per-domain cryptographic identifiers that let customers track suspicious account activity without storing plaintext usernames. Combined with existing leaked credentials detection and account takeover (ATO) detections — which caught 6.9 billion suspicious login attempts daily — these tools help website owners fight fake account creation, credential stuffing, and promotion abuse. Available at no extra cost to Bot Management Enterprise customers during the Early Access period.

10m read timeFrom blog.cloudflare.com
Post cover image
Table of contents
Leaked credentials make logins all too vulnerableFrom automation to intent and identityAssessing suspicious emailsIntroducing Hashed User IDsTake the next step in account protection today

Sort: