One trial per person. Not one per inbox or device.

Serial signups, shared device farms, disposable inboxes and patient repeat offenders bleed margin quietly. Pro remembers every device, network and email pattern over a window you set, up to a year, so the next “new customer” from a laptop you have seen before gets caught, weeks or months apart.

Book a demo

EU-hosted. Verdicts in milliseconds.

Device ↔ account memoryNetwork & IP correlationEmail normalization & collisionsZero friction for real signups
Signup monitor, one device3 accounts in 21 daysRolling memory

Three clean-looking signups, one device, three weeks apart. The pattern is the tell.

Already in production

Publishing platforms, fintech and national charities across Europe already run TrustSig on their forms.

PublitPrint-on-demand and digital book distribution for publishers.Publishing · SwedenLEI SystemOfficial Legal Entity Identifier registration agent.Fintech · EstoniaDisability Sport WalesNational charity for inclusive and disability sport.Charity · Wales
And many more across Europe
Case studyHow LEI System eliminated API abuse & form spamRead the case studyAPI abuse, eliminatedZero false positivesLive in five minutes
01Patience vs. memory

Rate limits see a burst. We see a habit.

Space your fake signups a week apart and every velocity check on earth waves them through – each one is the first of its minute, its hour, its day. Behavioural memory is the only thing that connects them.

02The inbox trick

Forty addresses. One inbox.

Dots and plus-tags make one mailbox look like infinite identities – unless you normalize before comparing. Pro folds every variant back to its canonical form, so the trick collides with the account it's hiding.

john.doe+a@gmail.comsame inbox
johndoe+promo2@gmail.comsame inbox
j.ohn.d.oe@googlemail.comsame inbox

Make every trial one per person.

Book a demo
03A few of the signals

How a fake signup gives itself away.

Each is a reason code in the verdict, and these are among the strongest of many. Most fake signups trip several at once; the patient ones trip them across weeks.

+40
criticalDevice fan-outOne device quietly accumulating accounts, the strongest serial-abuse signal there is.
02Email alias collisionDot-trick and plus-tag variants fold back to a mailbox that already has an account.critical+35
03Disposable emailTen-minute inboxes and throwaway mail hosts, flagged at the moment of signup.high+30
04Linked-device clustersGroups of connected devices creating accounts together. Farms look like farms.high+30
05Signup burstsSpikes from one IP or network – the loud version, still covered.high+25
06Machine-made addressesGenerated emails that don't look like any human's real mailbox – the randomness gives them away.medium+15
04Why it matters

Every fake trial ships at full cost.

01Infrastructure served to nobodyCompute, storage, support and onboarding emails – full COGS for a user who was never going to convert.
02Poisoned metricsFake trials crater conversion rates, inflate churn and corrupt every LTV model downstream.
03Drained incentive budgetsReferral bonuses, signup credits and promo codes are the actual target – and they leave with the abuser.
90 daysof device & email-pattern memory, your window
Any cadenceserial signups linked, minutes or months apart
0extra steps for real signups

See serial signups linked across weeks.

Book a demo
05The asymmetry

Real signups feel nothing. The serial ones hit a wall.

Every signal Pro weighs only fires on the patterns a genuine new customer never produces, a remembered device, a folded-back inbox, a weekly cadence. The honest signup sails through with zero extra steps; the device farm meets a verdict it can't reset its way around. No CAPTCHA pays for it.

Book a demo
06Integration

One event at signup.

Send the signup event with the email and the request context; the verdict comes back before you create the account. Route REVIEW to email or card verification – reserve the hard no for confirmed patterns.

signup.tsyour backend
const verdict = await pro.events.send({  kind: "signup",  user_id: newUser.id,  email: newUser.email,  ip: req.ip,});
if (verdict.decision === "BLOCK") return reject(res);if (verdict.decision === "REVIEW") return requireCardCheck(res);return activateTrial(newUser);
response<150 ms
{  "decision": "BLOCK",  "risk": 86,  "reasons": [    { "code": "DEVICE_ACCOUNT_FANOUT", "weight": 40 },    { "code": "EMAIL_COLLISION", "weight": 35 },    { "code": "EMAIL_ENTROPY", "weight": 11 }  ]}
07The rest of Pro

One signal layer. Every abuse pattern.

Each detection engine reads the same account, device and network memory – turn on one, the rest are a toggle away.

01Account takeover protectionStop the takeover, not the customer.Impossible travel02Account sharing detectionSee exactly who's sharing a seat — and decide what to do.Two cities at once03Multi-account & alt detectionNot just “looks like an alt” — alt of whom.Linked accounts04Bot & scraper classificationCatch the scraper that looks human in a single session.Stealth scrapers05Privacy & compliancePrivacy is the architecture, not the asterisk.Erasable by design
08 Questions

Trial abuse, answered

Pro remembers devices, networks and email patterns over a window you set, up to 90 days. The same device opening another account three weeks apart gets flagged even though every individual signup looks clean. Velocity limits catch bursts; behavioural memory catches patience.

09Get started

Make every trial one per person.

Tell us what you are trying to protect and why now. We will reply by email to set up access for your team.

  • EU-hosted, GDPR-native
  • No CAPTCHAs, no friction for your users
  • Verdicts in milliseconds

We reply by email to set up your demo. No payment or account needed.