Skip to main content
Scalping protection

Scalpers open a hundred accounts.One face clears the limit, whatever account it's under.

Where signals flag risk, or you choose to ask, an anonymous HumanCheck, about 3 seconds, confirms a unique person, no ID. Everything else is scored automatically, in the background, on every registration or checkout.

The problem

Accounts are easy to fake. People aren't.

A limit only counts accounts, emails and cards. None of them tells you how many people are actually behind the order.

  • Order #1821Order #1822Order #1823Same person

    Ten accounts, one face

    A script opens one account after another, each with a fresh email and card, and one person clears the limit again with every account.

  • Checkout attemptsSame drop, same second
    10:00:01.00210:00:01.00410:00:01.006
    Checkout script

    Faster than a fan can click

    A checkout script clears the form in milliseconds with no person behind it, while a real fan's page is still loading.

  • 40 orders placed1 buyer

    One buyer, the whole allocation

    Forty orders in a drop can come from one person behind forty accounts, and the allocation meant for forty fans never reaches them.

How it works

One face, one purchase limit, whatever account it's under

  1. 01

    Passive signals score every registration

    Device, network and behavior signals run on every registration or checkout, and flag what looks automated or repeated: a VPN, a data center IP, Tor traffic, a browser that's been here under another name.

  2. 02

    Risky registrations take an anonymous HumanCheck

    When the signals flag risk, an anonymous HumanCheck, about 3 seconds and no ID, confirms a live, unique person before a code or a place in the queue goes out.

  3. 03

    Registered before the drop opens, fast at checkout

    Put the check at registration, ahead of the sale, so the queue itself carries nothing extra, and a returning fan on a known device skips the scan at checkout.

Registration 2291
Score todayElevated
Last 30 days
Registrations today9

Let's talk trust

Start with a free pilot: see what the check catches on your own users, with no dev work to begin.

With tools like VerifyYou, AI becomes a force for good. It helps prevent AI-driven fraud and can be done with much lower friction than what we built over the years.
Wes MichaelFounder of Rare Patient Voice

Built by humans from

  • Quora
  • Pinterest
  • Square
  • Reddit
  • Gusto
  • Cohere Health
  • Google
  • Accenture
Security

Privacy and security in every decision

We keep a face code, not the photo, and hold it under SOC 2 Type II and ISO 27001:2022 compliant controls.

  • No images stored. VerifyYou does not store images.

  • No ID or documents. HumanCheck anonymously confirms there is a real, live, unique person, with no name or ID.

  • A face code, not a photo. We treat it as sensitive biometric data.

  • AICPA SOC 2SOC 2 Type II
  • Intercert ISO/IEC 27001 certificationISO 27001:2022
  • iBetaISO/IEC 30107-3 PAD Level 1 & 2
  • GDPRGDPR compliant

Common questions

Does the check slow down the sale?

Put it at registration, before the sale opens, so the queue itself carries nothing extra. The check takes about 3 seconds, and a returning fan on a known device skips the scan.

Can someone beat it with a photo or a video of someone else?

No. Liveness confirms a live, unique person at the camera, not a photo, a mask or a replay held up to it. It's iBeta tested against exactly those presentation attacks.

Is the limit one per person for good, or one per drop?

Your choice. Scope uniqueness to a single presale or drop and each fan gets one registration in it, then is free to register again at the next one. The same setting works for sneakers, vinyl, merch or any limited run.

What happens when a registration gets caught?

Block, the default, refuses the second registration outright. Allow and flag lets it through and raises it for your team to review before codes go out.

Can it stop someone from reselling tickets they bought themselves?

No. It makes the limit hold per person, so one person can't claim ten allocations behind ten accounts. A real fan who buys their own allowance and resells it is a job for your resale and transfer rules, not for us.

How much work is it to add?

It's two API calls: one to start the check and one to read the result.

Do we have to replace our KYC or bot tools?

No. It sits on top of your stack, so you keep your KYC and bot tools.

What does it cost?

It's 50 to 100 times cheaper than KYC. You pay per check, and nobody uploads an ID document.

Ready to get started?

VerifyYou scales trust: passive signals on every session, a face check only when risk calls for it.

The VerifyYou dashboard on a laptop, showing verification volume and threat signalsAn anonymous HumanCheck running on a phone

We use cookies. Privacy