Personally I found that rejecting disposable/temporary emails and flagging requests behind VPNs filtered out 99% of abuse on my sites. No need to ask for a pho

Personally I found that rejecting disposable/temporary emails and flagging requests behind VPNs filtered out 99% of abuse on my sites. No need to ask for a phone or card -- or worse, biometric data! -- which also removes friction.