When is it safe (and when might it not be safe) to automatically de-duplicate contacts submitted from a public facing form?

How might a malicious user leverage automatic contact merges to their advantage?

2 Answers 2


As soon as you automatically "merge", it will never be 100% safe. If you want to be sure, never dedupe (ie put dedupe rules that are not possible to match) and ask your users to login.

Obviously, it means that you will end up with tons of duplicates, so in practice, you will need to relax the rules and accept that you might have two different persons that end up merged in the same contact. This isn't as bad as it sounds, and it happens with every shared list of items that several people can update, and it doesn't create too much problems.

So your choice is what type of error you want to avoid more: having more duplicates or having more incorrect merges. For what I've experienced, the most relaxed rule is to consider that everyone sharing an address is the same person, and the strictest want the first and last name and email and country.

you might want to add an extra layer of protection if you send emails with the hash token (so your contacts don't have to login and are automatically identified) so they can't change their name by accident with this extension https://civicrm.org/extensions/no-overwrite

And you could enable the detailed logging http://book.civicrm.org/user/advanced-configuration/logging/ so you keep the history of all the changes if you haven't done it already

  • 1
    Our rules are even stricter! Names, email address and some of their membership information all need to match in order for us to 'automatically' merge the accounts. From a data protection standpoint, having two people incorrectly merged could be quite a serious error.
    – John
    Dec 14, 2015 at 14:10
  • What do you mean by automatically merging? is this the dedupe rule applied to the visitors (unsupervised) or are you merging them after they are created as duplicates?
    – Xavier
    Dec 14, 2015 at 19:18
  • This would be the unsupervised rule. We also have less strict 'general' rules which we would manually process in the 'find and merge duplicate contacts' screen.
    – John
    Dec 14, 2015 at 19:21

fill email address of someone else (so it will match with that person), then use different name/phone number/employer/membership/event sign up etc...

It would mess up your system, and your communication to original contact. That could be advantage enough for them.

Above is a theoretical possibility. In real life I have never seen it happen. So in my opinion it is safe to use it and do an automated merge only by e-mail.

I do have a customer who for this reason chose to not merge new contacts with existing ones and de-duplicate only manually.

  • So you should match on more than just the email address- some people share them legitimately.
    – DaveFF
    Dec 14, 2015 at 9:33
  • see the addition I made.
    – Catorghans
    Dec 14, 2015 at 9:43

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.