Anti-spam protection
How Sjocamp keeps fake and abusive signups out of your list.
Public signup forms are spam magnets. Sjocamp blocks the most common abuse patterns out of the box, with no configuration required. Available on the Pro plan and above.
What gets blocked
Disposable email domains
Submissions from known throwaway email providers (10minutemail, guerrillamail, mailinator, and ~290 others) are rejected at submit time. The signup never reaches your leads list.
The blocklist is maintained by Sjocamp and updates automatically — you don’t manage it yourself.
Velocity detection
If the same IP submits too many signups in a short window, later submissions are flagged or blocked. Thresholds:
| Signups in 10 minutes | Confidence | Action |
|---|---|---|
| 3 | 70% | Flagged, allowed through |
| 6 | 85% | Flagged, requires verification |
| 10+ | 95% | Blocked |
This catches scripted submissions and competitor sabotage without affecting normal traffic — a real human signing up doesn’t submit your form 10 times in 10 minutes.
Duplicate prevention
A given email can only sign up to a campaign once. A repeat submission returns the existing lead’s position rather than creating a duplicate, so you don’t end up with multiple records for the same person.
What still gets through
Anti-spam protection is best paired with email verification. The combination — disposable-domain block + velocity detection + verification — eliminates ~99% of low-effort spam without false positives.
For the remaining slice (manual signups using real-looking addresses to game referrals), use verified-only mode on your referral program.
Reviewing flagged submissions
Flagged-but-allowed leads (the 70%-confidence bucket) are visible in the leads list with a small Suspicious badge. You can review and either confirm or delete them — they won’t appear in default exports until you do.
What we don’t do
We don’t run a CAPTCHA on every signup by default — it tanks conversion (typically by 8–15%) and the protections above catch most abuse without it. If you face a sustained, targeted attack, contact support and we’ll enable a CAPTCHA challenge for high-confidence flags only.