Announcing Cloudflare Account Abuse Protection: prevent fraudulent attacks from bots and humans

Cloudflare introduces Account Abuse Protection, a new fraud prevention suite targeting both automated and human-driven account abuse.

• •Leaked credential checks are free for all customers, hashing passwords to compare against breach databases without storing plaintext credentials
• •Account takeover (ATO) detections caught an average of 6.9 billion suspicious login attempts daily across Cloudflare's network
• •Disposable email check identifies throwaway email addresses used for fake account creation and promotion abuse
• •Email risk tiers (low/medium/high) are derived from email patterns and infrastructure analysis for use in security rules
• •Hashed User IDs provide per-domain, cryptographically hashed user identifiers to track abusive accounts without compromising end-user privacy