Your store's signup form is protected against bots and fake registrations by three automatic checks. They work quietly in the background, with nothing for you to configure. This guide explains what they do so you understand why the occasional signup is turned away.
Disposable email blocking
When someone tries to register with a throwaway or temporary email service — the kind designed to self-destruct after a few minutes — the store rejects the signup and asks them to use a permanent email address. This keeps your customer list real and your verification emails landing in inboxes that actually exist.
A genuine customer using a normal provider such as Gmail, Outlook, or their own company domain is never affected.
The honeypot field
The signup form contains a hidden field that real people never see and never fill in. Automated bots, which fill in every field on a page, will complete it — and that gives them away. When the hidden field comes back with anything in it, the store quietly rejects the signup as a bot.
Because the field is invisible to humans, a real customer can never trigger this by accident.
The time trap
The form also records how long it takes to be filled in. A real person needs at least a few seconds to type their name, email, and password. A bot submits almost instantly. If the form comes back faster than three seconds, the store treats it as automated and asks the person to take their time.
Why a real signup might occasionally be rejected
These checks are deliberately cautious, so very occasionally a legitimate customer sees a "please try again" message. The usual causes are:
They used a temporary email
Some customers reach for a disposable address out of habit. Ask them to sign up again with their normal personal or work email.
They (or their browser) submitted too fast
Password managers and aggressive auto-fill can sometimes complete and submit the form in under three seconds, tripping the time trap. Asking the customer to simply try again, filling the form normally, resolves it.
What you need to do
Nothing routine — these protections are always on and need no setup. If a customer contacts you saying they cannot register, walk them through the two causes above: use a permanent email address, and fill the form in at a normal pace rather than letting it auto-submit instantly.