BOT PROTECTION FOR TICKETING

Presale Codes: How a Shared Password Becomes a Bot's Front Door

One shared presale code, posted on a forum, can put ten thousand bots in line ahead of the fans. The fix is a code that only works once, for one person.

A shared presale code is a password, and passwords get shared. Ticketmaster's Verified Fan replaced shared codes with unique, single-use codes tied to a registered identity, after the Eras Tour presale took 3.5 billion requests in a day. A code gets you into the sale, not a guaranteed ticket.

The shared code problem

A presale used to work like this: the artist's fan club, or the venue's mailing list, or a credit card sponsor, sends out one code, and everyone who has it can enter the presale. The code is a password, and passwords travel. It gets posted on a forum, shared in a group chat, and sold on a resale site, and by the time the presale opens, the line is full of people who were never invited, including bots running thousands of registrations at once.

In October 2026 the BBC reported that bots had created hundreds of thousands of fake registrations for one artist's sign-up, which then had to be reviewed by hand. The shared code does not just let the wrong people in, it drowns the registration system in fake identities that have to be sorted out before the real fans get their codes.

The Eras Tour presale that broke the system

Ticketmaster launched Verified Fan in 2017, after automated brokers were routinely clearing the best inventory before a normal buyer finished loading the page. The Eras Tour presale on November 15, 2022, was the stress test: the site took 3.5 billion system requests that day, roughly four times its prior peak, against a tour with about 2.6 million seats to sell.

About 3.5 million people registered in the United States, and roughly 1.5 million received codes. The rest were waitlisted or turned away before a sale existed. The numbers show the scale of the problem and the limit of the fix: even with identity-gated registration, demand was more than double the supply, and the code was never a promise of a ticket.

Unique codes, and what they actually fix

The fix is to stop sharing one code and start issuing one code per person. Laylo's RealFan system works this way: after pre-registering and verifying, each eligible fan gets a unique code tied to their registration, usable once, delivered usually one to two hours before the presale. The code cannot be mass-shared, because sharing it burns the only copy, and it cannot be resold at scale, because each code is bound to one identity.

Two-factor verification during registration is part of the same fix. It confirms the registration comes from a real person, not a bot, before a code is issued at all. The system does not eliminate bots, but it moves the fight from the presale itself, where the bots are fastest, to the registration, where identity checks have time to work.

What the queue does once you are in

A code gets you into the sale, not a ticket. Ticketmaster's own guidance says to join the waiting room before the sale starts, ideally up to 15 minutes early, because joining after the sale starts puts you at the back of the line. Once your turn comes, your spot is held for 10 minutes. Use one browser, one tab, one device: multiple tabs cause errors, and refreshing can get you flagged as a bot.

Presales are not a side door. For the most in-demand shows, 10 to 30 percent of total ticket inventory moves through presale channels before the general public ever sees a ticket. The code is the key to that inventory, which is why the fight over who holds a valid code is the fight over who gets to buy.

Keep reading

Related guides on this site: the waiting room bug that makes a queue never move how the queue itself became a sales channel load testing the queue before the sale opens More from Bot Protection For Ticketing.

Frequently asked questions

What is a presale code?

A code that gets you into a ticket presale before the general sale opens. It comes from a fan club, a venue mailing list, a credit card sponsor, or a Verified Fan registration. A code gives you access to the sale, not a guaranteed ticket.

Does a presale code guarantee a ticket?

No. Ticketmaster and AXS both say a code gets you into the sale, not a guaranteed ticket, and presales can sell out. For the hottest shows, 10 to 30 percent of inventory moves through presales before the general sale.

How does Verified Fan work?

You register in advance, Ticketmaster checks that each registration belongs to an individual rather than a bot, and when demand exceeds supply a lottery-style process decides who gets an access code. For the Eras Tour, about 1.5 million of 3.5 million registrants received codes.

Can I share my presale code?

You should not. Unique codes are single-use and tied to your registration, so sharing burns your only copy. Shared codes from fan clubs get posted publicly and invite bots into the presale.