How Can I Protect My E-commerce Site from Scalping Bots?

Implementing captchas, especially at the checkout stage, can help filter out some of the simpler bots. Adding multi-factor authentication can also add an extra layer of security. If you're worried about excessive traffic, routing everything through a service like Cloudflare could be beneficial, as they check for suspicious activity and may prompt captchas if something looks off. Just a heads up, I haven't personally used Cloudflare, so it's best to do a bit of research on it first.

Using tools like IP Resolver can really help manage this issue. I recommend blocking all IPs from free proxy lists and logging user agents and IP connections. Setting up an invisible captcha along with a traditional recaptcha at checkout might also help sift out the bots. It's definitely a lot of work, but worth it if you want to protect your inventory.

Blocking IPs and regional locations can effectively limit bot traffic. I'm based in the EU, and I often see bots from certain Asian regions, so I've blocked all those foreign IPs from accessing my site. It’s a straightforward tactic to reduce unwanted traffic.

Honestly, from my experience, Cloudflare's bot management features are quite comprehensive and deal with scrapers effectively. Their free tier catches a lot of basic issues. Beyond that, consider implementing rate limiting during checkout and possibly some proof-of-work challenges to make it tougher for bots to complete purchases.