Skip to content

How is Amazon SES addressing the problem with infinite pre-approved accounts?

53

Recently I've noticed a large number of advertisements for "pre-approved" Amazon SES accounts across Telegram, Discord, Facebook groups, and other platforms. Some sellers even claim they can provide multiple approved accounts every day. I understand that not every advertisement is genuine, but the volume of these offers raises questions about whether the current production access process is being exploited. If approved SES accounts are being obtained in large numbers, it could undermine the purpose of the production access review and increase the risk of abuse on shared infrastructure. That would ultimately affect legitimate customers who rely on Amazon SES for reliable email delivery. I'm interested in understanding whether AWS is aware of this and whether there are mechanisms in place to detect and prevent the misuse of suspiciously approved SES accounts.

4 Answers
21

It is extremely difficult to get approval from the support center. But is it possible to get auto-approval knowing which account to send a request to for production? Interesting scheme.

answered 7 days ago

9

Has this issue been addressed or resolved? Did anyone receive a response from the SES team regarding this?

answered 7 days ago

5

yeah, i agree with this. it’s pretty frustrating that some accounts seem to get approved while others get denied without any real explanation.

aws doesn’t need to reveal how they detect abuse, but they should at least tell people what they need to do to get approved instead of just saying no.

answered 4 days ago

-2

This is a legitimate concern and one that AWS takes seriously on multiple levels.

AWS is aware that there is fraud involving accounts on a large scale. Obtaining production access with Amazon SES is not as simple as ticking a box; it requires the evaluation of automated risk signals, an analysis of usage patterns, and in many instances a manual review. Nevertheless, no approval system is entirely immune to coordinated abuse, particularly when malicious actors create synthetic identities or use business information that looks legitimate to pass the initial review.

Detection mechanisms that exist on the SES side:

  • Sending reputation monitoring — every SES account is tracked against bounce rates, complaint rates, and spam trap hits. Accounts that show patterns of abuse are automatically throttled or suspended, regardless of how they were approved.
  • Enforcement actions — AWS can and does retroactively suspend accounts found to violate the Acceptable Use Policy, even after approval.
  • IP and identity signals — repeated account creation patterns from the same infrastructure, payment methods, or identity clusters are flagged.

What this means practically: The buyer also faces risks when purchasing pre-approved accounts on Telegram or Discord, since such accounts are frequently already flagged or else share IPs with a bad sending reputation; the delivery rate from a compromised or suspended account is much worse than that from a fresh start.

If you encounter specific sellers or listings, report them directly through the AWS abuse reporting form. AWS investigates reports and uses them to improve detection systems over time.

The general arms race between platform controls and account farming remains a continuous problem for all of the major cloud providers, not something that is specific to SES. Although AWS is still developing its signals, genuine community reporting does in fact play a role in this process.

answered 8 days ago

EXPERT

reviewed 7 days ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.