SMS Pumping Fraud Prevention Test
Your SMS verification step can be used to send thousands of texts to premium-rate numbers that someone else controls, and every message lands on your bill.
Stop bots and risky browsers from requesting verification codes. Link every verification text to a Device ID and cap how many codes one device can request.
How to use this demo
- Click Send code via SMS. A sample email and phone number are filled in. No real text message is sent: the code appears on screen, and the number is stored hashed.
- Click Verify. The code from the simulated SMS is filled in.
- Request another code with Resend code via SMS.
- Your second code is available after 30 seconds and your third after 60 seconds. Then the limit is reached: 3 codes per device per day.
- Try again with a different email and phone number.
- Open this page in incognito mode or turn on a VPN. The daily limit still holds.
- Try it with Tor or a browser automation tool such as Playwright. You are blocked right away.
- You can reset this scenario with the Restart button at the top right.
Note
Clearing cookies and opening a private window within a few minutes gives one visitor several new cookies in quick succession. ShieldLabs reads that as automation, so for the next few minutes the demo refuses the request with a browser automation message.
Create your Acme Chat account
Verify your phone number to finish signing up. No real text message is sent: the code appears on this page as a simulated SMS.