Know which users you can trust.

Rupt detects fake accounts, bots, and (many) other forms of fraud and abuse. It gives you a trust score and a risk engine to protect your users, products, and revenue.

Get started Book a demo

Protection at every layer.

From the moment users sign up to the moment they pay, Rupt gives you the intelligence you need to know which users to allow, challenge, or block.

Stop fraud at the front door.

Block fake signups, disposable and invalid emails, datacenter IPs, and malicious bots before they ever touch your product.

Get started Book a demo

Explore onboarding protection:

Policies /block-fake-signups

Active

Trigger

Actionissign_up

where

EmailisDisposable

IP typeisDatacenter

FingerprintmatchesBlocklist

Count eventsSignup

byBrowser fingerprint

inlast 24 hr

is> 3

Then Block signupfallback challenge via email

POST /v3/evaluationsverdict in 42ms12,847 today

01 — Signup protection

Stop fraud at the front door.

Block fake signups, disposable and invalid emails, datacenter IPs, and malicious bots before they ever touch your product.

Get started Book a demo

Policies /block-fake-signups

Active

Trigger

Actionissign_up

where

EmailisDisposable

IP typeisDatacenter

FingerprintmatchesBlocklist

Count eventsSignup

byBrowser fingerprint

inlast 24 hr

is> 3

Then Block signupfallback challenge via email

POST /v3/evaluationsverdict in 42ms12,847 today

Explore onboarding protection:

02 — Account security

Protect critical actions inside your product.

Account sharing, bots, and scrapers abuse your product from the inside. Rupt catches them on the actions that matter, without slowing your real users down.

Get started Book a demo

Policies /step-up-suspicious-actions

Active

Trigger

Actionissend_message

where

User trust scoreisLow

Event velocitysend_message

byUser

inlast 1 hr

exceeds5σ

Account ageis< 1 day

Then Challenge: Biometricfallback rate limit 1 hr

POST /v3/evaluationsverdict in 38ms47,213 actions today

Explore in-product protection:

03 — Content & data

Keep your content and data where it belongs.

Your data and content are your real moat. Rupt can protect them from account sharing, scraping, and other forms of unauthorized access before it hits your bottom line.

Get started Book a demo

Policies /prevent-account-sharing

Active

Trigger

Actionisaccess

where

People on accountis> 2

Concurrent sessionsis> 2

Impossible travelisTrue

Active devicesAccount

inlast 1 day

is> 5

Then Limit devices: 3fallback challenge other devices

POST /v3/evaluationsverdict in 31ms24,580 logins today

Explore content & data protection:

04 — Payment fraud

Stop payment fraud before chargebacks hit.

Catch card testing, stolen-card flows, and chargeback abuse before they even land on your checkout page. Rupt has visibility into your users' devices and behavior that your processor can't see.

Get started Book a demo

Policies /block-card-testing

Active

Trigger

Actionispayment

where

NetworkisVPN

Geo mismatchisTrue

Failed paymentsBrowser fingerprint

inlast 10 min

is> 5

CardmatchesBlocklist

Then Block paymentfallback challenge 3DS

POST /v3/evaluationsverdict in 35ms8,492 payments today

Explore payment protection:

Everything you need to protect your business in one place.

Every layer of protection: intelligence, rules, challenges, lists, and more already built, tested, and supported. Plug in the full pipeline or pull the raw signals into your stack. Both are first-class.

Intelligence on everything.

Real-time signals on every device, browser, IP, session, email, phone, and more.

iwanep636+2@esterace.com

Valid handle

Alias

Disposable domain

EmailDisposable

GeolocationSan Francisco, US

IP64.81.28.7 · AS15169

NetworkVPN detected

DeviceChrome 121 · macOS 14.5

Browser fpfp_a8b9c7d6e5f4

Bot riskHigh

Trust score0.18

Devices7 on account

Account age3 days

Impossible travelYes

ConcurrencyNo

Phone+1 (234) 567-8900

VOIPnon_fixed_voip

Challenges optimized for every use case, platform, and channel.

Robust challenges designed to accomplish a specific goal for each unique use case. SMS, email, biometric, and more adaptive challenges tuned for pass rate, and updated as fraudsters evolve.

https://scribble.ai/account-sharing

Create your own Scribble account today

We detected multiple people using this account. Please create your own account to continue.

Is this your account?

To review the devices using this account, please verify your email or phone number.

Define policies for every scenario.

Allow, challenge, or block, add to lists, and more. Combine our signals with your business logic to decide what's suspicious and how to handle it.

Bid placed

Bids > 20 / 1 hr

YesNo=

Challenge

Throttle

Allow

Trust

Message user

Trust score Low

YesNo=

Biometric

Quarantine

Deliver

Trust +1

Start trial

Fingerprint reused

YesNo=

Deny

Blocklist

Allow

Track FP

Job post

Account < 24 hr

YesNo=

Verify ID

Review

Publish

Notify

Bid placed

Bids > 20 / 1 hr

YesNo=

Challenge

Throttle

Allow

Trust

Message user

Trust score Low

YesNo=

Biometric

Quarantine

Deliver

Trust +1

Start trial

Fingerprint reused

YesNo=

Deny

Blocklist

Allow

Track FP

Job post

Account < 24 hr

YesNo=

Verify ID

Review

Publish

Notify

Bid placed

Bids > 20 / 1 hr

YesNo=

Challenge

Throttle

Allow

Trust

Message user

Trust score Low

YesNo=

Biometric

Quarantine

Deliver

Trust +1

Start trial

Fingerprint reused

YesNo=

Deny

Blocklist

Allow

Track FP

Job post

Account < 24 hr

YesNo=

Verify ID

Review

Publish

Notify

Customizable and extensible.

Drop in the full Rupt stack, or pull the raw signals into your own decisioning. Both are first-class.

Your canvas

Move your mouse here

Documented, supported, battle-tested.

Clear docs, tested SDKs, MCPs, and direct engineering support. You can ship in days, not months.

import Rupt from "rupt";
const rupt = new Rupt(
  "your_client_id"
);
awaitrupt.▍
evaluate
attach
challenge
verify
detach

NORMALrupt-demo.ts100% ≡ 9/9 ln : 7

$ node server.js && rupt listen

> Ready! Waiting for requests...

Developers

Easy, modern APIs that developers love.

Rupt is easy to integrate and use. Simple, well-documented APIs, SDKs, and MCPs. Built for the way modern developers work.

{
  "_id": "evl_3yJk7K9xQ2mR4nT8",
  "action": "login",
  "verdict": "challenge",
  "reasons": [ "new_fingerprint", "new_ip", "vpn_detected"],
  "projectUser": {
    "external_id": "usr_4f2c8a1b",
    "email": "user@example.com",
    "phone": "+12125550100"
  },
  "metadata": { "plan": "pro" },
  "fingerprint": {
    "_id": "fp_a8b9c7d6e5f4",
    "hash": "5d41402abc4b2a76b9719d911017c592",
    "stableHash": "8e2a6c1f9b3d4a7e",
    "confidence": 0.94,
    "projectUserCount": 1,
    "deviceCount": 2,
    "ipCount": 3
  },
  "risks": [
    {
      "category": "fake_account",
      "severity": "high",
      "score": 7,
      "indicators": [ "disposable_email", "datacenter_ip"]
    },
    {
      "category": "bot",
      "severity": "medium",
      "score": 4,
      "indicators": [ "headless_browser", "automated_behavior"]
    },
    {
      "category": "account_sharing",
      "severity": "high",
      "score": 5,
      "indicators": [ "concurrent_sessions", "high_computer_count"]
    },
    {
      "category": "ato",
      "severity": "high",
      "score": 6,
      "indicators": [ "new_fingerprint", "new_ip", "ip_is_vpn"]
    }
  ],
  "risk_summary": [
    { "category": "fake_account", "severity": "high" },
    { "category": "bot", "severity": "medium" },
    { "category": "account_sharing", "severity": "high" },
    { "category": "ato", "severity": "high" }
  ],
  "geolocation": {
    "ip": "203.0.113.42",
    "latitude": 40.7128,
    "longitude": -74.0060,
    "city": "New York",
    "region": "NY",
    "country": "United States",
    "country_code": "US",
    "security": {
      "anonymous": false,
      "proxy": false,
      "tor": false,
      "vpn": true,
      "hosting": false
    }
  },
  "ip": {
    "address": "203.0.113.42",
    "asn": "AS15169",
    "asn_name": "Google LLC",
    "datacenter": false,
    "reputation": "suspicious",
    "blocklists": [ "spamhaus_xbl", "abuseipdb"]
  },
  "email": {
    "address": "user@example.com",
    "is_disposable": false,
    "is_webmail": true,
    "is_valid": true,
    "is_accept_all": false,
    "is_verified": true
  },
  "phone": {
    "number": "+12125550100",
    "carrier": "Verizon",
    "line_type": "non_fixed_voip",
    "is_valid": true,
    "is_verified": false
  },
  "policy": {
    "_id": "pol_z9y8x7w6",
    "name": "Block multi-accounting",
    "action": { "type": "challenge" }
  },
  "challenge": {
    "_id": "chl_8d7c6b5a4",
    "mode": "rupt_managed",
    "type": "biometric",
    "redirect_url": "https://challenge.rupt.dev/?challenge=chl_8d7c6b5a4"
  },
  "lists": {
    "matched": [ "trusted_devices"],
    "allowlisted": true,
    "blocklisted": false
  },
  "createdAt": "2026-05-18T14:32:01.842Z"
}

Proprietary browser and device fingerprints, returned on every call.

{
  "_id": "evl_3yJk7K9xQ2mR4nT8",
  "action": "login",
  "verdict": "challenge",
  "reasons": [ "new_fingerprint", "new_ip", "vpn_detected"],
  "projectUser": {
    "external_id": "usr_4f2c8a1b",
    "email": "user@example.com",
    "phone": "+12125550100"
  },
  "metadata": { "plan": "pro" },
  "fingerprint": {
    "_id": "fp_a8b9c7d6e5f4",
    "hash": "5d41402abc4b2a76b9719d911017c592",
    "stableHash": "8e2a6c1f9b3d4a7e",
    "confidence": 0.94,
    "projectUserCount": 1,
    "deviceCount": 2,
    "ipCount": 3
  },
  "risks": [
    {
      "category": "fake_account",
      "severity": "high",
      "score": 7,
      "indicators": [ "disposable_email", "datacenter_ip"]
    },
    {
      "category": "bot",
      "severity": "medium",
      "score": 4,
      "indicators": [ "headless_browser", "automated_behavior"]
    },
    {
      "category": "account_sharing",
      "severity": "high",
      "score": 5,
      "indicators": [ "concurrent_sessions", "high_computer_count"]
    },
    {
      "category": "ato",
      "severity": "high",
      "score": 6,
      "indicators": [ "new_fingerprint", "new_ip", "ip_is_vpn"]
    }
  ],
  "risk_summary": [
    { "category": "fake_account", "severity": "high" },
    { "category": "bot", "severity": "medium" },
    { "category": "account_sharing", "severity": "high" },
    { "category": "ato", "severity": "high" }
  ],
  "geolocation": {
    "ip": "203.0.113.42",
    "latitude": 40.7128,
    "longitude": -74.0060,
    "city": "New York",
    "region": "NY",
    "country": "United States",
    "country_code": "US",
    "security": {
      "anonymous": false,
      "proxy": false,
      "tor": false,
      "vpn": true,
      "hosting": false
    }
  },
  "ip": {
    "address": "203.0.113.42",
    "asn": "AS15169",
    "asn_name": "Google LLC",
    "datacenter": false,
    "reputation": "suspicious",
    "blocklists": [ "spamhaus_xbl", "abuseipdb"]
  },
  "email": {
    "address": "user@example.com",
    "is_disposable": false,
    "is_webmail": true,
    "is_valid": true,
    "is_accept_all": false,
    "is_verified": true
  },
  "phone": {
    "number": "+12125550100",
    "carrier": "Verizon",
    "line_type": "non_fixed_voip",
    "is_valid": true,
    "is_verified": false
  },
  "policy": {
    "_id": "pol_z9y8x7w6",
    "name": "Block multi-accounting",
    "action": { "type": "challenge" }
  },
  "challenge": {
    "_id": "chl_8d7c6b5a4",
    "mode": "rupt_managed",
    "type": "biometric",
    "redirect_url": "https://challenge.rupt.dev/?challenge=chl_8d7c6b5a4"
  },
  "lists": {
    "matched": [ "trusted_devices"],
    "allowlisted": true,
    "blocklisted": false
  },
  "createdAt": "2026-05-18T14:32:01.842Z"
}

Reliable at scale

Billions of requests a year, 150M+ a month, resilient even under high traffic with 99.99% uptime.

100ms response time

100ms p99 latency. Fingerprinting, geolocation, verdicts, and more in one fast, modern API.

Extensible infrastructure

Build custom rules, risks, challenges, trust scores, and more and deploy in real-time.

From startups to enterprises, customers trust Rupt.

"Without Rupt, it was impossible to detect account sharers with factual data. Once we added Rupt, we realized we were missing $1M+ ARR and decided to dig into it."

Alexis Dupont

Product Principal, Agorapulse

"What we thought would be a real friction point with our existing customers, we saw them go, 'oh my God, why haven't you done this sooner?' They saw it as a feature, not friction."

Adam Siegel

VP of Product Growth, Crexi

"We saw about 4% of account sharers convert immediately after implementing Rupt, which was fantastic."

Danielle Dyess

Principal Product Manager, Sketchy

"Our first line of defense was to start paying attention to user signals on our own. However, we quickly realized that it was more than a full-time job to accurately identify account sharers."

Andy Romano

Founder, Prep101

"Growth rate doubled after implementing Rupt's repeat sign up detection. This improved the platform's stability and availability and reduced our OpenAI credits usage."

Mohamed Abdelmaksoud

Founding Full Stack Developer, StealthWriter

"Rupt was a plug-and-play win for us. It handled a massive amount of complexity out of the box, started protecting our bottom line almost immediately, and the team has been genuinely responsive every step of the way."

Nelson Joyce

Co-founder, Tettra

That's about Rupt. What about you?

Spin up an account in minutes, or talk to us first if you'd rather we tailor a setup to your business.

Get started Book a demo

Intelligence

Identification

Bot and AI agent detection

Rules engine

Modular challenges

By use case

Account sharing

Multi-accounting

Referral fraud

Fake accounts

Account takeover

Developer resources

Documentation

API reference

API status

Know which users you can trust.

Rupt detects fake accounts, bots, and (many) other forms of fraud and abuse. It gives you a trust score and a risk engine to protect your users, products, and revenue.

Protection at every layer.

Stop fraud at the front door.

Stop fraud at the front door.

Protect critical actions inside your product.

Keep your content and data where it belongs.

Stop payment fraud before chargebacks hit.

Everything you need to protect your business in one place.

Intelligence on everything.

Challenges optimized for every use case, platform, and channel.

Define policies for every scenario.

Customizable and extensible.

Documented, supported, battle-tested.

Easy, modern APIs that developers love.

Reliable at scale

100ms response time

Extensible infrastructure

From startups to enterprises, customers trust Rupt.

That's about Rupt. What about you?

Quick start

Want to chat or have questions?

LLM?