Signup Abuse Defense: When CAPTCHA Gates Creation and Risk Signals Catch Up

Signup protection works best as a sequence, not a single verdict: use CAPTCHA before account creation when the request already looks automated, then apply risk scoring after signals from the attempted...