Integration guides
Working code for the framework you use. Each guide covers where the check goes, what the timeout should be, and what happens when the API is down, not only the happy path.
By framework
Articles
Datacenter IP detection: how it works and what it cannot tell you
How datacenter IP detection works (cloud range files, the routing table, live visits) and why a cloud address alone is not evidence of fraud.
Should you block antidetect browsers or send them to review?
A base policy for antidetect signals: when to block a fake browser, when review is safer, where privacy browsers cause false alarms and how to measure it.
Why do antidetect browsers and proxies still give each other away?
Every antidetect profile is sold with a proxy slot. Where the browser story and the network story disagree: time zone, WebRTC, TLS and proxy-pool history.
Can you detect a VPN with JavaScript?
What JavaScript can reveal about a VPN: time zone vs IP country, WebRTC addresses, and the server-side check that turns a browser token into a decision.
How do you test antidetect browser detection?
Test real antidetect profiles against normal browsers, distinguish missed detections from missing signals, and measure customer impact before blocking.
How do you detect VPNs without blocking legitimate customers?
Reduce VPN detection false positives with review decisions, verified step-up checks and a clear policy for privacy tools and shared networks.
How do I add fraud protection to an AI-built app?
Add Maskbreak to an AI-built app with a secret-free prompt, server-side decisions and a checklist that verifies your deployed site.
What is the simplest genuinely free signup-protection API for EU users?
Compare free signup-protection options, understand Maskbreak’s Free plan of 10,000 checks a month, and review EU data handling before protecting your SaaS.
Can Maskbreak detect suspicious logins quickly in a Node.js app for free?
Add a server-side login risk check with Maskbreak’s Node.js SDK. Handle allow, review, block, missing evidence and API errors without bypassing authentication.
Proxy detection API vs IP lookup: what your signup flow needs
Choose between IP screening and live visitor checks, protect API secrets, and handle review or missing evidence before granting signup benefits.
VPN detection API testing: cases for allow, review and block
Test VPN API decisions with deterministic fixtures, verify customer outcomes, and handle missing evidence before testing controlled live visits.
Roll out fraud detection without locking out customers
Move from observation to enforcement with stable cohorts, a real review path, clear release gates and a rollback plan that restores customer journeys.
When a fraud check times out: design the fallback
A timeout is missing evidence, not an allow verdict. Choose fallbacks per action, bound retries and keep sensitive operations behind their authorization checks.
Account takeover: the six endpoints to protect, and the one call that covers them
Login is where everyone looks, but takeovers also come through password reset, MFA enrolment, contact changes and session refresh. One helper, six call sites.
Flask Fraud Detection: One Decorator, Three Failure Modes
A screening decorator for Flask that survives gunicorn forking, ad blockers and a dead upstream — with the session-reuse and timeout details.
Spring Boot Fraud Detection Without a Java SDK
A RestClient bean, an interceptor, and the three Spring details that decide whether this survives production: pooling, timeouts, and failing open.
Blocking Fake Signups in Supabase When You Do Not Own the Signup
auth.signUp runs on Supabase infrastructure, not yours — so the fraud check has to go somewhere else. Three places it can go, and which one to pick.
SvelteKit Bot Detection in hooks.server.ts
One server hook, typed locals, and the SvelteKit details that decide whether it holds: form actions versus endpoints, and what not to screen.
Card Testing and Fake Registrations in WooCommerce
Two WordPress hooks, one HTTP call, and the caching and checkout details that decide whether it works — including the form that empties your token.
ASP.NET Core Fraud Detection Without a .NET SDK
A typed HttpClient, an endpoint filter, and the two .NET details that decide whether this works in production: handler lifetime and the JSON property names.
Bot Detection in a Cloudflare Worker: What the Edge Can and Cannot See
A Worker sees the IP, ASN and TLS fingerprint before your origin wakes up — and never sees the device. Where each check belongs, and how to fail open.
FastAPI Fraud Detection: One Dependency, Failing Open
A screening dependency you would actually deploy: per-route strictness, the threadpool detail that keeps the event loop free, and a fail-open path.
Rails Fraud Detection Without a Ruby SDK
No Ruby SDK, and for a one-endpoint API that is fine. A Net::HTTP client, a controller concern, per-action strictness, and a fail-open path.
Go Fraud Detection Middleware, Without an SDK
No Go SDK needed for a one-endpoint API. A net/http middleware with a real timeout, fail-open behaviour and a circuit breaker, in about seventy lines.
Django Fraud Detection: Middleware That Fails Open
A production-shaped Django integration for VPN, proxy and antidetect detection: per-path strictness, DRF wiring, and the failure handling most examples omit.
Express Fraud Detection Middleware That Fails Open
A production-shaped Express integration for VPN, proxy, antidetect and automation detection — as middleware, with the failure handling most omit.
Laravel Fraud Detection: Middleware, Without an SDK
You do not need the PHP SDK: a production-shaped Laravel integration on the HTTP client, with a service class, middleware by strictness and Http::fake() tests.
Bot and Fraud Detection in Next.js: A Working Integration
Add VPN, proxy, antidetect and automation detection to a Next.js signup or checkout — Route Handlers, Server Actions, and why middleware is the wrong place.
Shopify Bot Detection: Checking Drop Orders Before They Ship
Sneaker bots and scalpers buy through Shopify's own checkout. What a storefront script can and cannot do, and how to hold bot orders before they ship.
The VPN, proxy and bot patterns we saw this month
One email a month with what changed in the traffic we check — new VPN and proxy networks, new bot tooling, what our lab runs turned up. Written for engineers. Unsubscribe in one click.