GitHub Suspends New Registrations with Outlook and Hotmail
GitHub customer service responded in a community discussion that the platform has suspended new account registrations using Outlook and Hotmail addresses due to ongoing, coordinated fraud and abuse associated with these domains. Existing accounts are not affected, and there is no exception review channel for outlook.com.
Users will see "Email domain could not be verified" on the registration page, while username and password validation can pass, and verification emails will not be sent. Changing browsers, clearing cache, or checking spam folders will not bypass this, as the interception occurs before the email is sent.
Customer service recommends using other supported email addresses for registration. GitHub documentation requires personal accounts to verify their email. On September 13, the platform experienced a failure rate of over 90% for new account registrations, which has been separately resolved and is not related to this domain suspension.
Outlook and Hotmail have a large volume and relatively high reputation scores, which have previously allowed them to bypass disposable email blacklists. There exists a toolchain in public repositories for bulk registering Outlook/Hotmail accounts, obtaining OAuth refresh tokens, and performing survival checks, turning Microsoft's consumer email into a scalable identity resource.
The interception only applies to new registrations and does not affect developer accounts already linked to these email types. The platform stated it will continue to evaluate methods between preventing abuse and secure access but did not provide a timeline for restoration.
In market mechanisms, what is sold is high-reputation email identities that can be produced in bulk, while what is bought are free repositories, Stars, and CI quotas on the platform. Funds and scripts flow from email farms to the intercepted registration funnel; beneficiaries are Gmail and other still-open email services and corporate domains, while those under pressure are gray market users relying on the Outlook pool for dummy accounts and new users who are mistakenly affected. The event is driven by risk control thresholds rather than product functionality being taken offline.
Source: Public Information
ABAB AI Insight
GitHub has raised the identity threshold from "like a real email" to "has this domain been treated as a farm?" Consumer-grade Microsoft emails have long been outside the disposable domain blacklist, allowing bulk registration machines to treat Outlook as the highest success rate material. Customer service's approach of "suspending new registrations, existing accounts remain unchanged" separates existing developers from incremental abuse, avoiding mistakenly harming paid organizations and historical submission records.
The capital path on the gray market side involves proxy pools, captcha solving, and OAuth token libraries, while on the platform side, it involves the cost of verification emails, cleaning up abuse repositories, and availability incidents. The spike in registration failure rates in mid-September indicates that the same registration interface is nearing overload, and domain-level circuit breaking is cheaper than verifying each captcha.
Similar practices have appeared in social media banning Russian area codes, cloud providers banning temporary emails, and payment companies banning virtual card BINs: first cutting off the largest supply channels, then discussing whitelists. The industry phase is that AI agents and automated account creation have pushed the "one real person one free account" clause to its limits, with identity layers becoming a bottleneck before code layers.
Structural judgment corresponds to regulatory changes within the platform, namely the reconstruction of access rules. The mechanism is that when email reputation can be copied in bulk by scripts, the platform can only remove entire segments of domains from the registration pool; those who still control non-scalable corporate emails or verified phones will price the new account quotas for open-source platforms.
ABAB News · Cognitive Law
Once reputable emails can be produced in bulk, they will be completely cut off.
Existing accounts remain unchanged, new registrations are halted, separating existing users from farms.
Identity becomes a scarcer quota on the platform than code.