Prevent pre-fetching of links in emails

user_597034 0
Viewed 655

I am sending HTML-formatted event invitation emails to customers with accept/decline links in them. It seems that some of these links are being pre-fetched though, resulting in the invitations being auto-declined. Oh goodie.

I have included the rel="nofollow" attribute on the links to prevent email servers, clients or other lurking middlemen from 'clicking' the links. This has helped but not entirely eliminated the problem - I still have some bot pre-fetching the links when sent to outlook.com addresses at least

I would like to avoid requiring additional action on the part of email recipients after (genuinely) clicking these links, especially in the 'decline' case, so I see there being two avenues to solving this:

  1. Find additional mechanisms to prevent wayward bots from following the links in the first place. Nothing else on this coming up in my searches so far though.
  2. Detect the bot activity when links are pre-fetched and ignore them in such cases.

For the latter, it is not merely a case of checking the UserAgent header - the example I am presently seeing is:

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36

Admittedly an old version of Chrome already, but that's not a valid reason to ignore it! Unfortunately, I don't see anything else useful in the HTTP headers to tip me off either.

What I don't know yet is whether or not the pre-fetching culprit will attempt to execute any 'onload' Javascript code on the landing page. If not, that may be the ticket.

Any suggestions appreciated!

UPDATE

Have tried responding to initial query with a page triggering a client-side redirect either via a <meta> tag or using a body onload event handler. Both were executed by the offending bot, so no joy there at least. I'm wondering if I'll have to sink to an invisible recaptcha to solve this one. Yuck.

prefetch email
2 Answers

I've had the same problem for an email where I asked clients to provide a rating. I noticed many spurious ratings and when I started to contact clients for confirmation they sometimes had no clue what I was talking about. So I can only assume that those ratings were due to some pre-fetching bot selecting a random link from within the email. The only reliable solution, as far as I can see, is to require visitors to do 1 more click on the landing page to confirm whatever action they are trying to perform, i.e., use a POST event as mentioned by Robert above.

user_104258890

I ultimately did not find any silver bullet for this problem and had to add interstitial pages into my workflow, where invitees need to confirm their acceptance or declining of invitations on my site via an additional click after following the links within the invitation emails. Not what I ultimately wanted, but I found myself backed into a corner with this one unfortunately.

I may re-visit this at some point and try to minimise the need for the additional clicks using recaptcha v3 to try to detect the bot visitors, but it still requires bouncing the site visitor around between pages and is not a great user experience.

user_5970340
Related