Stripebot
Run by Stripe
How to detect Stripebot
Stripebot names itself in its user agent, but anyone can copy a user agent, so it is detected by confirming the user agent against other signals: source IP confirmed as the operator's own network; and how the session clicks, types, moves and navigates matches an automated agent.
- Detection method
- Self-declaredThe agent names itself in its user agent, and Verisoul confirms it with network, device or behavioral data. A user agent alone is never enough.
- Signals that identify it
- NetworkSource IP confirmed as the operator's own network
- DeviceNames itself as Stripebot in its user agent, which we check against the rest of the session
- BehavioralHow the session clicks, types, moves and navigates matches an automated agent
Every signal Verisoul checks for Stripebot
Stripebot names itself in its user agent. Anyone can copy that, so we only label a session Stripebot when the other signals check out too.
- Not used
Cryptographic
Not needed to identify it
- Used
Network
Source IP confirmed as the operator's own network
- Used
Device
Names itself as Stripebot in its user agent, which we check against the rest of the session
- Used
Behavioral
How the session clicks, types, moves and navigates matches an automated agent
How often you'll see it
Uncommon
Seen on some sites, in small volumes
Questions about Stripebot
How do you detect Stripebot?
Stripebot names itself in its user agent, but anyone can copy a user agent, so it is detected by confirming the user agent against other signals: source IP confirmed as the operator's own network; and how the session clicks, types, moves and navigates matches an automated agent.
What is Stripebot?
Stripebot is Stripe's crawler for reviewing merchant websites.
Does Stripebot identify itself?
Partly. Stripebot names itself in its user agent, but user agents are easy to copy, so the name alone is not proof.
Can a bot pretend to be Stripebot?
A bot can copy Stripebot's user agent or markers, but the network, device and behavior signals will not match, so it is not labeled Stripebot.
How common is Stripebot?
Uncommon. Seen on some sites, in small volumes.
What does the Verisoul API return for Stripebot?
Every session Verisoul identifies as Stripebot carries an agent block with id "stripebot", name, provider, type "other", detection_method "self_declared" and the detection_signals used (network, behavioral). Build rules on the id, type and detection method.