How to trace the source of SMS and telephone bombing

Website SMS verification is the primary way for websites and apps to verify the authenticity of users' mobile phone numbers. SMS verification function not only provides convenience for websites and apps, but also is used maliciously by some users.

Users maliciously click on the SMS verification code, which will not only increase the company's operating costs, but also have a very bad impact on the company's image (generally, SMS messages will bear the company's signature), so we should guard against this behavior. At present, the means of prevention mainly include the following aspects:

1) SMS sending interval setting-Set the time interval for repeated sending of the same number, which is generally set to 60-120s;

2) IP limit-according to your own business characteristics, set the maximum amount sent by each IP every day;

3) mobile phone number limit-according to the business characteristics, set the maximum sending volume of each mobile phone number every day;

4) Process restriction-SMS verification and user name and password setting are divided into two steps. After the user successfully sets the username and password, the next step will be SMS verification, which can only be carried out after the successful receipt is obtained in the first step;

5) Binding the graphic verification code-Binding the graphic verification code with the mobile phone verification code can effectively prevent malicious software from registering.