- avilalehzarAsked on March 25, 2016 at 12:38 PM
I cant respond to this thread for some reason: https://www.google.com/url?q=https://www.jotform.com/answers/802668-Why-was-my-IP-and-account-banned-again&sa=U&ved=0ahUKEwiw66LkoNzLAhXCdD4KHRiNAWoQFggRMAQ&client=internal-uds-cse&usg=AFQjCNFJC6rFuXdPKCSpSWMSZoZSGO-o0Q
I will do what you asked and remove the passwords and usernames and change my email address. Please give me access for the username avigdorla with its associated IP. I am reaching out to you from a different account because you banned the one I want to un-ban.
But I have to say that you are all very unprofessional. You are ruining my business and causing us alot of problems over some terms of service that contradicts what you say. You say we cant have usename and passwords on our forms but if you search the forums the first things that come up are instructions on how to make them. You want to change your rules for security reasons, I get it, but you are going about it the wrong way and its causing us to look for alternatives to jotform.
- CharlieAnswered on March 25, 2016 at 12:57 PM
Apologies for the inconvenience. The reason why you cannot access this thread https://www.jotform.com/answers/802668 is because it is set to private, I set it to private because email addresses of your accounts are posted when I replied to your concern, we do not want your emails to be displayed in public as we consider them valuable. You can only see that thread link if you used the email address email@example.com.
Please note that there were indeed old post/threads that allows the creation of passwords, but this rule has been changed due to a history that our company has. Last 4 years, the US government suspended JotForm due to phishers who used our forms to collect sensitive information and used for fraud. This action affected thousands of JotForm users and businesses, so we took this extremely serious and did the necessary steps to prevent this from happening again.
You can find blogs about this event in our company, here's one.
With that, we have a sensitive anti-phishing tool and a dedicate team of manual reviewers. I understand that this might affect you, but please do understand the reason why our management has taken serious implementation regarding this matter.
I have re-activated your account, but please do remove the sensitive fields mentioned and update your email address if possible.
- avigdorlaAnswered on March 25, 2016 at 01:17 PM
No problem, just know that the first time I was banned, support mentioned to me that I just needed to change the field in my forms from being labeled as password to something else. I changed it to security code and support even acknowledged that it was acceptable. All of this being last week. So forgive me if I am a little surprised to be banned again and then told about a change in terms of service. This was not reflected in my first ban that was only last week. refer to the first thread I posted to you and you will see the whole back and forth. I will make teh changes you requested but it will take some time, I have ALOT of forms.
- CharlieAnswered on March 25, 2016 at 01:30 PM
I understand, thank you for your cooperation.
Normally, the "security code" can be an acceptable field name if our anti-phishing tool will scan it. However, manual reviewers will question this field with a lot of different factors. If I am the manual reviewer, as mentioned, I will be suspicious with the use of a logo of a company named Comtron and not using a company email. That's one factor. Another is that the field username is next to the security code, which should prompt the manual reviewer that the form is being used as a log in page and covering the security code as a fake field label. There are a lot of things we can consider.
But the best way to avoid being suspended is to make your form and your account as legit as possible, if you are working on a company, its best to use the company email for your account. In some instances, the credibility of the account increases if it is a paid account, why? This is because we can associate the billing or payment method to a legit company.
This information is just a part of the process, we have a lot of protocols on how to check and review a form and an account. As mentioned, our company took serious steps on implementing this, so I hope you understand. Please do update your account and the forms to avoid being suspended again.