How do I stop users from registering multiple accounts using Gmail dots and +plus aliases?
ACCEPTED ANSWER
Normalize the local part before storing uniqueness: lowercase the address, replace @googlemail.com with @gmail.com, strip everything after the + symbol, and remove all dots if the domain is gmail.com. Or call the VeriShield Edge /v1/verify endpoint, which returns canonical_email and an HMAC-SHA256 canonical_hash automatically.
Go deeper
See the free tools to test this yourself, or the integration guides to implement it in your stack.