Subscription bombing and how to mitigate it
https://bytemash.net/posts/subscription-bombing-your-signup-form-is-a-weapon/
How bots used our sign-up and forgot password pages to bomb real people's inboxes, and what we did to stop it. A practical guide to subscription bombing for founders and developers who think CAPTCHA is an "I'll do it later" task.