DPL offers eCards via Quipu Group. The ecard application includes name/address verification against address databases, in compliance with our online vendor agreements.
Customers with ecards can access most DPL databases but only those with a Denver address are able to access Kanopy. They can place up to 3 holds on local (DPL) items but have to upgrade from eCard to permanent, in person by showing picture ID, in order to checkout those holds.
Our system was compromised about 6 weeks into the covid closure by international bad actors who posted instructions online for getting around our address verification system (basically searching to find valid name/address combos in CO and then registering under a false identity).
While the system caught and rejected over 18,000 fallacious registrations, more than 3500 made it through and began hitting our UDEMY site. Gale shut it down for nearly a month, preventing all of our customers, both permanent and ecard, from using the resource until we'd negotiated a solution. So, at this point only permanent cardholders who have presented an ID in person have access to UDEMY.
We've also had to eliminate a checkbox that facilitated reg for students as that created another potential loophole for bad actors. Unfortunately, this means inequity in serving these members of our community and significant extra work for our staff in registering school groups.
In general, eReg works great and is a huge convenience for us and our customers but thought I should share this cautionary tale.
-Jennifer
Denver Public Library