Skip to main content
Fraud in promotion systems usually falls into two categories:
  • Promotion fraud: misuse of incentives such as vouchers, discounts, or loyalty points
  • Identity fraud: abuse of user accounts, such as fake accounts or account takeovers
Voucherify helps prevent promotion fraud using built-in campaign controls. Identity fraud prevention must be implemented on your side using external systems.

​
Campaign security

Use built-in controls to limit how incentives are distributed and redeemed. Voucherify supports fraud prevention through:
  • Validation rules: Define conditions and limits for incentive usage
  • Time limits: Restrict when incentives can be used
  • Activity tracking: Monitor usage and detect suspicious behavior

​
Anti-fraud limits

Use validation rules and campaign settings to define limits and conditions for incentive usage. These limits help prevent misuse, protect your campaign budget, and ensure incentives are used as intended.
Control who can receive and redeem incentives.
  • Use Customer segment to restrict access to selected users
  • Use Customer loyalty tier to limit eligibility
  • Use Redemption only by code holder to prevent sharing of codes
These controls reduce the risk of unauthorized access and limit incentive exposure to selected audiences.
Limit how often incentives can be redeemed.
  • Total number of redemptions: Limits how many times a campaign can be used in total, preventing overuse
  • Redemptions per customer in a campaign: Prevents a single user from repeatedly using the same promotion
  • Redemptions per customer per incentive: Limits how many times one user can redeem a specific code
You can also apply time-based limits:
  • Total number of redemptions per day / week / month: Slows down large-scale abuse and bot activity
  • Redemptions per customer per period: Prevents repeated use within defined time frames
These limits protect your budget and reduce the impact of automated or repeated abuse.
Control how much value is distributed through incentives.
  • Total discounted amount: Caps the total value of discounts applied in a campaign
  • Total orders value: Limits the total value of orders using incentives
  • Total redeemed gift amount: Restricts how much balance can be used from gift campaigns
These limits protect your campaign from unexpected overspending and financial abuse.
Define when an incentive can be applied based on order structure.You can use rules such as:
  • Total amount before discounts: Ensures minimum cart value before applying incentives
  • Total amount after discounts: Controls final pricing after applying discounts
  • Items quantity: Limits usage based on the number of items
  • Price of any item / each item: Restricts incentives to specific product price ranges
You can also control which items qualify:
  • Any order item
  • Every order item
  • None of the order items
  • Most expensive item
  • Cheapest item
These conditions prevent misuse by ensuring incentives apply only to valid purchases.
Percent discounts can apply a high discount amount for large orders.To protect your margins, you can set up a Maximum discount amount for order- and product-based percent discounts. Customers won’t receive higher discounts from the percent discount when they would exceed the maximum limit.
Learn more about Discount types and effects.
Restrict how incentives are redeemed.
  • Use Redeeming API key to limit which integrations can perform redemptions
  • Use Redeeming user to control which internal users can redeem incentives
These controls help prevent unauthorized or unintended redemptions.
Rate limiting per IP must be implemented on your backend or API gateway.
Restrict when incentives are valid.You can define:
  • Campaign start and expiration dates
  • Specific time windows
  • Validity period after publication
These limits prevent reuse of expired incentives and reduce long-term abuse.
Learn how to configure time limits
Undo redemptions when needed:
  • Restore redemption limits
  • Restore balances such as gift cards or loyalty points
This allows you to correct mistakes or reverse suspicious activity.
Rollback is available up to 3 months after redemption.

​
Activity tracking

Monitor campaign activity to detect unusual patterns. Voucherify lets you track:
  • Campaign performance
  • Customer behavior
  • Redemption history
  • API requests
Each object (campaign, voucher, customer, order) includes logs and history in the dashboard. Use this data to identify suspicious activity such as sudden spikes in usage or repeated failed attempts.

​
Notifications and reports

Use notifications and reports to detect issues early.

​
Webhooks

Use webhooks to receive real-time notifications about events such as redemptions or customer updates. This lets you detect unusual activity and react immediately, for example by blocking suspicious requests, flagging accounts, or triggering internal alerts. You can configure webhooks in Project settings webhooks. For an overview, see Introduction to webhooks. Recommended events for fraud monitoring:

​
Dashboard reports

Use dashboard reports to identify unusual patterns. Focus on:
  • Spikes in redemptions, which may indicate abuse or bot activity
  • High failure rates, which may signal repeated invalid attempts
  • Unexpected changes in campaign performance, which can reveal misuse patterns

​
External fraud prevention tools

Use external tools to detect and prevent identity fraud, such as fake accounts, account takeovers, and suspicious user behavior.
  • AtData: Email and identity verification for detecting disposable or risky addresses.
  • Sift: Machine learning-based fraud detection.
  • SEON: Fraud detection using data enrichment and behavioral analysis.
  • Nethone: Behavioral analytics and device intelligence.
  • FingerprintJS: Visitor identification across sessions.
These practices are not provided by Voucherify. You can implement them in your authentication or backend systems.

​
Account protection

Protect user accounts from unauthorized access:
  • Limit failed login attempts to reduce brute-force attacks
  • Use CAPTCHA to block automated account creation
  • Enable multi-factor authentication to protect user accounts

​
Customer verification

Reduce fake accounts and improve data quality:
  • Block suspicious email domains to prevent fake registrations
  • Normalize email addresses to avoid duplicate accounts
  • Require email or SMS verification to confirm user identity
Combine fraud prevention mechanisms with the following features.
Most anti-fraud mechanisms in Voucherify are based on validation rules.Use them to define limits, restrict access, and control how incentives are used.Learn how to create validation rules or explore the validation rules reference.
Use customer data to restrict access to incentives and detect suspicious behavior patterns.Learn more in the customer overview.
Use distributions to control how incentives are delivered and reduce the risk of sharing or misuse.Learn more in the distributions guide.
Last modified on April 21, 2026