That's one way to avoid writing code 😭

yeah, the tricky part is stopping repeat offenders without affecting genuine users

throw them off a cliff

Issue a tech fatwa.

you can't fully stop it, you can only make it costly. phone verification plus a device fingerprint catches most people, and anyone who really wants back in will still find a way

Eliminate

Ban by IP address. Realistically, you can't use anything to stop them if they are even moderately tech savvy.

will call their mother to tell her what her kid's been up to.

IP block is what they used to do, something like CF would do device fingerprinting.

take that mac address g

By deleting signup form.

Tell them that’s against the terms and conditions of service

Murder them.

- Govt issued ID - Phone number validation over SMS - Fingerprinting

One most used forms is putting a Cookie on the machine to track the browser but now with the cookie policy this is not “possible anymore” and obvious can fail because user can reset browser or simply switch. Now you use browser fingerprint to “record” (and can use this tou avoid mfa), or ask extra PII like phone number / identity IP ban only of come from undesired countries. Maybe have IA to check behaviour, detect and ban the clone

What if they use different device and use a vpn ? Even after implementing device fingerprint + ip track + risk score ?

Simple ban their ip adress or do it the @RockstarGames way find enough evidence lock them up for life so they can't use the internet again 🤪

You don’t, what you do is incentivise having a long-lived account through eg discounts/access to members-only facilities such that starting fresh with a new account is a massive pain in the arse

You can’t. Accept the user even if they create multiple accounts. Add them all to the active user count for when you IPO.

If your most personal data on your user is their email, this is not your biggest problem

there are only 2 logical solutions: shut down platform so you are 100% sure, or send him an email requesting his promise not to sign up with different email.

I will take a note of certain characteristics if most of them amtch a new account i will ban it like (containing same number,name,age,dob,location etc) no same person can have everything same

Let them sign up, and reassess your application to prevent them from doing what it is that got them banned.

Let him sign up, and if he engages in suspicious activities again, block him. The problem you mentioned cannot be solved 100%. Keep improving the system to identify and detect suspicious activities.