Velocity limits are anti-abuse controls that cap how many actions a single user, device, IP address, card, or account can perform in a short time. They are commonly applied to sign-ups, login attempts, password resets, payments, message sends, and transfers. When activity exceeds the expected rate, the system can slow requests, add verification, or block them entirely.
In cyber security, velocity limits matter because many fraud and intrusion campaigns depend on speed and repetition. Attackers use them to mass-create accounts, brute-force passwords, test stolen cards, or move money before a detection team reacts. Properly tuned limits make that abuse more expensive and easier to spot. Defenders often combine them with anomaly detection, device fingerprinting, and step-up authentication so that legitimate users are not blocked while automated abuse is disrupted.