CashoutGuard: fraud prevention for rewards, GPT, faucet, PTC and offerwall sites.

Changelog

What changed in CashoutGuard, newest first. Every change ships to all plans the same day.

October 2026

Check anything, without code

  • Same offer completed twice from one browser with another account (same site, same publisher or another publisher of a network) now scores 85 on the conversion: duplicate payouts are blocked in enforce mode. Part of the Multi-accounts switch.
  • Enforce spike alert: if enforce mode blocks far more than usual in an hour, you get a notification at once, so real users are never blocked for hours unnoticed.
  • Always block: switches in Rules & lists to block VPNs, Tor, datacenter IPs, multi-accounts, emulators, bots or disposable emails whatever the score. On every plan.
  • "Protected by CashoutGuard" badge for your site (light or dark), with the code to copy on the Install page.
  • Overview date filter: last 24 hours, 7, 30 or 90 days, or your own from–to. Every number, chart and list on the overview follows it, and the link keeps the period.
  • Enforce mode now shows on the overview what it stopped: accounts, signups, logins, offer clicks, conversions and cashouts, with the money held.
  • Cashout status API (POST /v1/cashouts/status): when you pay, hold or deny a cashout in your own admin, the cashout queue follows. The evaluate answer now includes cashout_id.
  • IP and email lookup API (GET /v1/lookup): reputation for any IP or email without an event, included in every plan (Free 1,000 a day, Pro 500,000). Lookups never count as active users.
  • Pricing page: a calculator that compares per-lookup pricing with ours, using your own numbers.
  • Free integration on every plan: no developer needed, we set up the script, the server calls and your offerwall postbacks for you. Ask from the Install page.
  • Free offer link checker (/tools/offer-check): paste an offer, affiliate or offerwall link and see every redirect, the companies behind it and the app it lands on.
  • Offer tracer allowance per plan and month: Free 10, Starter 100, Growth 500, Pro 2,000 traces (25 during the free trial).
  • Pricing FAQ: we charge per monthly active user, never per lookup. Every event of the same user is included.
  • Offer tracer: paste an offer link, pick iPhone, Android or desktop and a country, and see every redirect, the networks and trackers behind it and the app it lands on.
  • Postback relay: point an offerwall at CashoutGuard instead of your site. Each conversion is scored and forwarded unchanged to your postback URL, or held back in Enforce mode. No code to change.
  • Bulk check: paste up to 500 IP addresses or emails and get a verdict for each, plus how many of your accounts use it. Download the result as CSV.
  • Searching Accounts for an IP or an email now also says what it is: VPN, Tor, hosting, disposable domain, or an alias of another address.
  • Free email checker on the website: disposable domains, domains without a mail server, Gmail dot and plus aliases.
  • If only the browser script is installed, the overview shows what it already sees (VPN and hosting visitors, IPs shared by several devices) until the server API is connected.
  • The install page shows what your integration sends for each event type, and which missing field turns off which checks.

Work as a team

  • Alerts to Discord, Slack or Telegram for every newly blocked account (up to 20 an hour), with a test button.
  • A read-only Viewer role, and the owner can require two-factor authentication for everyone.
  • Review queue: Allowlist and Block buttons right in the Review and Block lists.
  • Saved views on the Events page.
  • Rotating the secret key no longer breaks your integration: the old key keeps working for 24 hours (or revoke it at once if it leaked).
  • Traffic compares each period with the one before.
  • Your month now starts on the day your plan started, like your invoice: active users, usage alerts and extra-user billing all follow it, and the billing page shows the dates.
  • Privacy: device fingerprints, links between accounts and idle end-user accounts are deleted automatically 12 months after their last activity (see the Privacy Policy, section 5).

September 2026 — Launch

Blocking that acts, and learns

  • Enforce per event type: act on cashouts only, for example, while the rest stays in shadow mode.
  • Allowlisting a flagged account teaches CashoutGuard: the rules page suggests a lower weight for reasons that keep causing false positives on your site. "This was legitimate" is one click from any flagged event.
  • A shared fingerprint alone (identical phones, nothing else in common) no longer blocks by itself.
  • Residential proxies are caught sooner: an IP seen with many time zones anywhere on the service counts, without revealing where it was seen.
  • New signal flagged_on_network: the same email or device was blocked on another website protected by CashoutGuard. The other website is never named.
  • New webhook event.blocked, fraud-spike emails, an activity log in Settings, account search by email, IP or wallet, and CSV export of accounts.

Refer & earn, support and contact

  • Refer & earn: share your link and earn 25% of what the customers you bring pay, for 12 months. They get 30 days of Growth free. Withdraw from $50 by PayPal or USDT.
  • A Support page inside the dashboard and a Contact page on the website, both answered by a person, usually within a few hours.
  • Switch between shadow and enforce mode, and between light and dark theme, from the top bar.

Billing that handles every case

  • More for the same price: Starter covers 25,000 monthly active users with the linked-accounts graph and velocity checks, Growth 100,000 and Pro 400,000. Above that, Pro users pay $1 per 1,000 extra users and are never cut off.
  • Change plan at any time from the dashboard. Upgrades charge only the difference for the rest of the month. Downgrades turn unused time into credit.
  • Cancel with one click and keep your plan until the end of the paid period, or resume before that date.
  • Failed payments show a clear notice with "Pay now" and "Update card". A declined upgrade never changes your plan.
  • Pay by card (monthly or yearly, Stripe) or with crypto (USDT, USDC, BTC, ETH and more), prepaid for 1, 3 or 12 months. 12 months cost the price of 10.
  • Invoices with your company name, address and tax ID, downloadable as PDF. Add your VAT or tax ID at checkout.
  • Yearly card plans: 12 months for the price of 10. Switch between monthly and yearly at any time.

Stronger VPN and device detection

  • Hidden VPNs: browser timezone and language compared with the IP's country, WebRTC IP leaks, and one IP seen with many timezones (residential proxy pattern).
  • Official server lists of the largest VPN providers, hosting networks, Tor exit nodes and iCloud Private Relay, refreshed every day.
  • Spoofed phones: device model checked against its graphics chip, China-only models connecting from abroad, and default emulator profiles.

Built for offerwalls and GPT sites

  • Offer names everywhere: overview, accounts, events and fraud rings.
  • Offer checks: completed too fast for the offer, conversions without a click, click and conversion from different countries, earnings far above the account's usual day, duplicate transaction IDs.
  • Conversions inherit the device and context of their click, so server-to-server postbacks are scored like browser events.
  • Offer catalog sync so every event shows the offer's real name.

Dashboard

  • Notes and activity on every account: your team writes why it approved or blocked someone, and every block, allowlist and cashout decision is recorded with who and when.
  • Clearer setup errors: agent.js explains in the browser console when a domain is not allowed or a key is wrong, and localhost always works for testing.
  • Rules per signal: switch any signal off, give it your own weight, or make it always send users to review or block. Each signal shows how often it fired in the last 7 days.
  • Export events to Excel: a real .xlsx file with headers in your language, dates, coloured decisions and filters. CSV is still there for scripts.
  • Team: invite your fraud and support team by email. Only the owner manages billing and the team.
  • Risk by source: see which publisher, offerwall or campaign sends the risky traffic.
  • Offerwall network mode: accounts sent as "publisher:user" are only linked inside the same publisher.
  • Send a signed test webhook from Sites and see if your endpoint accepted it.
  • Traffic view by country, network type, device model and VPN share.
  • Fraud rings: accounts grouped by shared device, payout address, email or IP, with the money at risk and one-click blocking.
  • Cashout review queue, rules and lists, webhooks and a 7-day shadow-mode report by email.
  • 12 languages, including Arabic and Urdu written right to left.

Security

  • Two-factor authentication for every team member: authenticator app codes plus 8 one-time recovery codes (Settings → Security).
  • Email confirmation before the dashboard and the free trial unlock.
  • Round-the-clock health monitoring and error alerts for our team.
  • A public security page and a vulnerability disclosure contact.