Our Philosophy
Most people are not spammers. That's why we don't burden everyone with excessive verification just to send an invitation. Instead, we use a progressive verification system that only kicks in when we detect suspicious behavior.
Real users get a smooth experience. Bad actors hit walls.
Our multi-layered approach means spammers can't easily game the system, while legitimate users rarely notice any friction at all.
Progressive Verification
Think of it like building trust. Everyone starts with basic email verification, but if we detect something suspicious, we ask for more proof that you're a real person.
Most users never go beyond email. But if someone starts spamming invitations or getting reported, they'll need to verify their phone. Continued suspicious behavior? We'll ask for location verification. The worst offenders face identity verification before they can continue.
The Layers of Protection
We don't rely on just one defense. Here's how our multi-layer system works:
Email Intelligence
We check email addresses before accounts are even created. Disposable email services, suspicious patterns, and known spam domains are blocked or flagged automatically.
- 90+ disposable email domains blocked
- Pattern detection for spam-like emails
- Suspicious TLD monitoring (.tk, .ml, etc.)
- Random string detection
Invitation Quotas
Every account has a limited number of invitations. Pending invitations count against your total, and retracting invitations has a cost. This prevents mass invitation spam.
- Monthly quota limits per plan
- Pending invites count against total
- 3 retractions = 1 used invitation
- Upgrade to get more invitations
Trust Score
Every user has a trust score that goes up when invitations are accepted and down when they're declined or reported. Low trust scores trigger additional verification.
- Starts at 50 for new accounts
- Increases when invites are accepted
- Decreases on declines or reports
- Below 20 requires phone verification
Country Consistency
Your phone number country, physical location, and billing address should match. If they don't, we'll ask questions. This catches VPN-using spammers and international fraud rings.
- Phone country verification
- Location verification via mobile app
- Billing address matching
- Exception requests for travelers
Geographic Risk Assessment
Some regions have higher spam and fraud rates. Users from these areas may need additional verification, but legitimate users can always verify and continue using Kizu normally.
- Risk-based verification requirements
- Legitimate users can always verify
- No blanket bans on any country
- Regular review of risk levels
Community Reports
Users can report spam. Multiple reports trigger automatic review and potential suspension. This lets the community help keep Kizu safe.
- Easy one-tap spam reporting
- 3+ reports triggers auto-review
- Reporters stay anonymous
- False reports are also tracked
How Quotas Work
Your invitation quota is like a monthly budget. Here's an example for a free account:
Notice how pending invitations and retraction penalties both count. This means spammers can't send thousands of invitations and then retract them. Every action has a cost.
Need more invitations? Upgrade your plan. This ensures that heavy users who send lots of legitimate invitations aren't blocked, while keeping the free tier safe from abuse.
What Happens If You're Flagged?
If our system flags your account, don't panic. Legitimate users can always appeal.
-
Verify your phone — instantly restores most account restrictions
-
Submit a petition — explain your situation and we'll review manually
-
Request a country exception — traveling? Just let us know
-
Verify your location — proves you're a real person in a real place
We never permanently ban without human review. Our goal is to stop spam, not to lock out real people.
New Account Waiting Period
New accounts must wait 24 hours before sending invitations. This simple delay stops spam accounts that are created, used to spam, and then abandoned. Real users barely notice this — you're probably still setting up your account anyway.
The Bottom Line
We protect the community without punishing legitimate users. Our systems adapt to behavior, not demographics. Everyone gets a fair chance, and bad actors get stopped.
Kizu is built for families and friends who want to share memories privately. That mission only works if the platform stays safe. These protections ensure that when you receive an invitation to join someone's circle, it's from someone who genuinely wants to connect with you — not a spammer trying to sell you something.