Huge increase of "high risk requests" out of nowhere

[pierroo]

• What version of React Native? 0.73.4
• What version of React Native WebView? 13.7.0
• What version of the library? 1.3.0
• iOS/Android version?
• Did the problem happen after updating React Native? no
• Are you using the library for the first time? no

I have been using this library for years without issue.
Then out of nowhere starting November 15th approximately, the "high risk requests" went from a usual 0.5% to litterally 75%!!
which blocks almost everyone from signing up in my app.

What could explain this issue?
any help would be super appreciated

[adamhongmy]

My company app is facing same spike issue starting on 16th November sgt. But we are using react-native-webview. I am now searching around and found this github issue and wanted to share my issue too.

[pierroo]

thank you for sharing that I am not alone.
probably many more impacted.
Recaptcha does rely on webview to work, so issue might be coming from webview?
Hard to tell, but might be worth posting in there as well?

what's your RN version / webview version / recapatcha version?
perhaps we can find some common points to start with

[adamhongmy]

• What version of React Native? 0.73.4
• What version of React Native WebView? 11.26.1
• recapatcha version? v3

[adamhongmy]

I am wondering are there any google forum post that reported this issue.

[pierroo]

• What version of React Native? 0.73.4
• What version of React Native WebView? 0.74.6
• recapatcha version? v3

ok so upgrading recaptcha won't fix the issue;
you're on the same RN version as me
your webview version is probably wrong though, are you using "react-native-webview" as well?

as for google forum post, didn't find any yet, but first one who finds anything shares it here alright?

[adamhongmy]

ya i am using "react-native-webview": "11.26.1",. I corrected the comment.

[douglasjunior]

Hello guys, thank you for the feedback.

I'm currently not working on a project that uses reCAPTCHA, so I'm unsure about the blocks. However, I will provide any updates if I have them.

In the past, the blocks I encountered were related to multiple devices solving captchas using the same internet connection (Wi-Fi), which led Google to add the IP address to a sort of "blacklist."

Just for the record reCAPTCHA v2 and v3 are completely different products.

[pierroo]

thank you for your input @douglasjunior

but in my case, it's thousands of users everyday from every parts of the world that faces the issue.
I have like 5000 daily new subscription that goes through this captcha, and 50% of them are failing because of a score too low.

so that can't be the IP blacklist issue, when they email asking for help they are indeed genuine users

[shriganesh64]

+1. I have been using this package for approximately 1.5 years and updated react-native-webview to version 13.12.1 three months ago. However, this issue started occurring about a week ago

[douglasjunior]

According to the latest reports on this issue, the problem started without anything being changed in the lib or webview.

This makes me think that some changes on Google's side increased the rejection rate.

Therefore, I don't see anything we can do in relation to the lib to solve this.

[pierroo]

You're right @douglasjunior , in that case does any of you know which Google's service / contact we should reach out to to let them know about it?
if we all contact them for the same it might make them realize something legit is going on

[lvillacin]

Encountering this issue on our end too. I was thinking in a normal website, the reCAPTCHA script is added as soon as the page is loaded and reCAPTCHA may already start gathering information about the device / user.

When used in react native inside a web view however, we load the reCAPTCHA script just in that moment (few seconds max) right before we generate the token.

I was thinking if there's a way for us to move the reCAPTCHA script on screen load and perhaps keeping it there without generating a token and then just call the grecaptcha.execute() function later on when the user submits the button may improve our stats?

We haven't tried it yet and would love some input on this.

[JRS-Developer]

Hello, is this issue still happening? I was thinking on using this library migrating from Recaptcha v3 (low score) and I'm not sure now.

[pierroo]

@JRS-Developer still happening yes;
However not sure this is related to this library specifically; but to captcha in general.
Are you not facing it with Recaptcha v3?