11Kas
Reason to create fake accounts using real email addresses
I've been dealing with a problem that I can't solve until I find the cause. We get regularly accounts made with scraped/leaked emails and random names. They are useless because you need to verify the email before logging in, so they remain inactive. Usually, a failed register attempt wouldn't bother me, but people receive activation emails of accounts they didn't create, some mark those emails as spam, and that really bothers me.
If I'd knew why would anyone create such accounts, I'd be able to mitigate them in some way. I already have some checks in place, captcha pops up after the first inactive account from the same IP, but bots got kind of smart.
Does anyone have a clue of what would be the use for such accounts?
