A captcha system has been implemented, but even with this in place we have received registrations of accounts subject to BOTS. Is it possible that automated scripts can still pass captcha systems? What solution should we add to stop these suspicious accounts?
does your captcha have a set pool or is it really random?
random. Which leads us to think that these are manually created accounts
in that case, isnt your question kinda pointless? rather find a way to deter manual bot creation. some email validation possibly? auto-delete new accounts that havent made any inteactions within a week?
for now we'll just delete the accounts created with the same email address on the same day. that's if they don't interact with the site
these are hypotheses. the system generates random combinations, but the accounts created are usually created with the same email, on the same day and with completely strange usernames. That's why I'm wondering if, even with a captcha system in place, it's still possible for bots or automated scripts to get through the registration system.
there is some pretty good text to text interpreters. possibly something reads the capacha as an image and determines what the characters are. For the quick solution y dont u just make emails and accounts unique?
yes, I've thought of that too