50% off

Half price through October on Basic and Pro plans. New customers only. See pricing

Back to Help Hub
Security & ComplianceGuide3 min readUpdated 2026-09-28

How Do I Prevent Bots From Signing Up for My Referral Program?

Reduce automated sign-ups with reCAPTCHA, email verification, qualification rules, reward review and suspicious-activity checks.

Send this article context to support so a human can pick up quickly.
Browse topics and support
Navigation

Topics

Article

On this page

Support

Ask AI

Ask a product or setup question without leaving this page.

Need human help?

Still stuck?

If this article does not solve the problem, send the context to support or book time with a human.

We will keep the article or page context with your request so support can respond faster.
Need help applying this to your account?

Contact support and we will keep this article attached to your request.

Overview

reCAPTCHA helps reduce automated sign-ups. Use it with email verification and qualification before issuing rewards. If something looks suspicious, check the sign-ups in the Leads view.

Turn on reCAPTCHA

Step 1
Open the relevant campaign.
Step 2
Go to Campaign Settings.
Step 3
Scroll to Advanced Settings.
Step 4
Expand reCAPTCHA Configuration.
Step 5
Turn on Enable reCAPTCHA.
Step 6
Test the public referral experience before promoting the campaign.
Referral Factory reCAPTCHA configuration for a campaign
Enable reCAPTCHA to reduce automated form submissions.

Do not reward an unqualified sign-up

Bot traffic is easier to manage when your Reward Rule waits for a real qualification. The editor warns that New referral has no fraud protection because it rewards every new referral.
With manual issuing, a reward stays Due until an admin reviews it. Choose Issue Now only if the referral meets your rules. If it does not, choose Cancel reward.

Check the Leads view

Look for lots of sign-ups in a short time, very fast submissions, repeated details, or leads that never qualify. In the Leads view, you can see Status, Source, Referred By, Qualified Date, IP, and Integration ID.
These details help you spot patterns, but they do not decide whether a referral is fraudulent. reCAPTCHA reduces automated submissions, but it will not catch every kind of abuse.
See how to enable reCAPTCHA for the exact steps, then use the fraud-prevention guide to plan the remaining review controls.
Referral Factory Leads view used to review suspicious sign-ups
Review sign-up timing, source, qualification and IP information for suspicious patterns.
Still need help?

Send this article to support

A human can review the article you were reading and help with the exact next step.

Article feedback

Did this answer your question?

Your vote helps support spot weak articles, fix missing steps, and decide when a person should step in.