Protection rules
Allow trusted domains, block known abuse, and review newly registered domains.
Protection rules let you adapt SignupScore to your own customers and abuse patterns. Manage them from Dashboard → Protection.
Exact domain rules
Add a domain to always allow or always block it for your account.
| Situation | Rule | Result |
|---|---|---|
| A trusted partner's new domain would normally need review. | Allow | SignupScore returns allow. |
| A domain repeatedly creates abusive accounts in your product. | Block | SignupScore returns block. |
Rules apply to the domain and its normal subdomains. Enter the base domain you want to control, such as example.com.
New-domain policy
The optional new-domain policy can send recently registered domains to review or block. Choose the age threshold and action in the dashboard.
For example, you can review signups from domains registered less than 14 days ago, then ask those users to verify their email before receiving trial credits.
Precedence
SignupScore checks rules in this order:
- Your exact allow or block rule.
- Your new-domain policy, when the registration date is known.
- SignupScore's built-in email and domain checks.
This order means an exact rule always wins. A trusted domain can be allowed even when another signal would normally ask for review.
Unknown domain age
SignupScore cannot confirm the registration date for every domain. When the date is unknown, the new-domain rule is skipped. The signup is not reviewed or blocked just because age data is missing.