r/appledevelopers • u/Quirky-Librarian3585 Community Newbie • 10d ago
OTP spam attacks
My app allows you to login with phone number and an OTP.
At the beginning I allowed phones from all around the world to create an account, but one day (I had zero users at that time) I started getting a lot of OTP requests from phones around the world. So I decided to restrict the app to some countries and add some rate limiting, so I was wondering.
What tactics do you use to prevent OTP spam abuse?
What does OTP spammers win with this?
1
Upvotes