Part of the problem that makes creation of alts so easy is that there is no email verification when creating an account. The following procedure can be used to insure that the email addresses are valid and remain valid.
- Require a valid email address to create an account.
- Whenever a new account is created validate that the primary email address is not being used as the alternate email address in any other account.
- Whenever an alternate email address is provided verify that is is not being already uses as the primary or alternate email address for any other account.
- If it passes the above tests, send a message to the email address used to create the account with a link that must be used to activate the account.
- Until the account is activated the user can not log on to the game.
- Require that an alternate email address be unique and valid.
- When a user adds or changes the alternate email address validate that it is not already being used as the primary or alternate email address in any account.
- If it passes the above test send an email to that email address with a link that must be used to validate it. If the link in not used within 24 hours suspend the account until the a valid alternate email address is provided (see 2.1 above) and verified (send an email with the link to the new email address) or the alternate email address is removed.
- Require that primary email address is valid if the alternate email address is removed.
- When a user removes an alternate email address send mark the account as not validated and a message to the primary email address with a link that must be used to validate it. If the link in not used within 24 hours suspend the account until one of these two things happen:
- The link is used
- A valid alternate email address is provided (see 2.1 above) and verified (send an email with the link to the new email address).
- One time validation of all user accounts
- Flag all accounts as not validated.
- Validate that the alternate email address is not being used as the primary or alternate email address in any other account. If it is, send a message to the email address in question listing all the accounts that are in violation and saying that they must provide a unique and valid alternate (see 2 above) email address or remove the alternate email address and the primary email address is valid (see 3 above) within a week or the account will be suspended.
- Send a message to the email for every user with a link for all accounts that are not in violation of the above rule. The email should have a link that the user must click on to validate the account and say that if the account is not validates within 7 days it will be suspended.
- 7 days after the messages go out any account that that has not been validated is suspended, When the user attempts to log on to the game he is redirected to a screen that explains why the account has been suspended and that either must remove the violations by doing one of the following.
- Remove the alternate email address and the primary email address is verified (see 3 above except the 24 hour wait does not apply).
- Provide a valid alternate email address (see 2 above).
- Periodic validation of email address
- On a periodic basis (I suggest every 6 months but no more that once a year), validate the user accounts to insure that the email address is still valid. This can be done all at once or a portion of the accounts (one 6th every month if done every 6 month, etc) so that not all the validation is done at once.
- Use the procedure in 4 above for the accounts being validated except 4.2 is not needed since 1, 2, and 3 will not allow duplicates to be created.
- Start the periodic validation 6 months after the one time validation if it is done on a rotating basis so that no account goes more that 9 months (of on a 6 month rotation) or 18 months (if on a year rotation) without the first validation after the one time one.
It does nothing to curb alt creations because it takes about 5 minutes to set up a new e-mail address...the only way to prevent alts most alts is to make this a payed game with activation keys. Most people won't pay to create alt accounts, those who do, well what are you going to do huh? lol. because this is F2P it will never happen. Just continue to report.



Reply With Quote

