Hacker News Reader

I don't know much about your defences, but a good way of making your site less attractive to phishers might be to put an artificial delay inbetween when a form is submitted and when the owner can get access to the submitted data.

If that delay is longer than it usually takes for an abuse report to come in, and for it to be acted on, then it would prevent phishers from getting any data before the page is taken down. Maybe just do this for free users?

View on HN

Although this might prevent (a bit) that the phishers get the actual data and hence protect the victims, I am pretty sure that it won't cause any drop in phishing attempts. However for the legitimate users it will probably have a huge negative impact.

It's comparable to trying to stop spam in forums/blogs by disabling url's in posts. Usually you'll get the same number of spam posts, but the url's will be plain text.

It might actually be a good thing commercially. It gives them something to upsell. If you have a paid account, you get instant access to your form data. Free accounts have to wait.

I doubt it. Very little annoys users more than taking away something they are used to and trying to sell it back to them.

Reply on news.ycombinator.com