Multi-accounting detection

Detect and block users creating multiple accounts early, stopping referral abuse, bonus fraud, and ban evasion.
Start for Free
Abuser
Customer

Why Multi-Accounting Fraud Matters

Promo & Referral Abuse

Multiple accounts repeatedly claim sign-up bonuses, referral rewards, and discount codes, draining budgets meant for real users.

Ban Evasion

Banned users return under new identities within minutes. Moderation has zero lasting effect without duplicate account detection.
Banned
New

Free Trial Farming

Duplicate accounts cycle through free trials indefinitely, consuming resources and inflating metrics without converting.
Pro Trial (7 Days Left)Pro Trial (6 Days Left)Pro Trial (5 Days Left)Pro Trial (4 Days Left)Pro Trial (3 Days Left)Pro Trial (2 Days Left)Pro Trial (1 Days Left)

Collusion & Game Manipulation

Duplicate accounts collude in poker, gambling, and competitive gaming, enabling chip dumping, smurfing, and match manipulation that undermine fair play.
Single Controller (IP / Device)

Analytics Pollution & Fake Engagement

Duplicate accounts distort conversion rates, retention, and user counts, and flood platforms with fake ratings and reviews.

How BotBye Detects Multi-Accounting

BotBye collects device, network, and behavioral signals from every request, links accounts that share common attributes, and scores the probability of multi-accounting in real time.
Signal Stream
ipnetwork
databehavior
fingerprint
Multi-Accounting Score
0123456789
0123456789
/100 (High Risk)
Custom Rule
Account Cluster
@crypto_whale_88@airdrop_hunter@solana_king@bonus_claimer
Automated Action
[ BLOCK MULTI-ACCOUNT ]Cluster Auto-Flagged & Logged
  1. 1

    Collect Signals

    • Device fingerprint
    • Behavioral patterns
    • Network attributes
    • Requests context
  2. 2

    Link Accounts

    • Match by shared device
    • Match by behavior
    • Match by network origin
    • Surface account clusters
  3. 3

    Score Risk

    • Multi-accounting probability
    • Custom rules evaluated
    • Threshold check applied
    • Risk score assigned
  4. 4

    Act

    • ALLOW | CHALLENGE | BLOCK
    • Flag linked accounts
    • Trigger alerts
    • Log for review

Multi-Accounting Detection Signals

  • Device Intelligence

    Persistent device identification links accounts back to the same machine, even after cleared cookies, new browser profiles, or incognito mode.
  • Network & Anonymity Detection

    Detects VPNs, proxies, and residential proxies used to make one device look like many.
  • Behavioral Analysis

    Coordinated timing, device fingerprints, network telemetry, and registration velocity tie accounts together.
deviceType: MobilehardwareConcurrency: 32ipType: DataCentersuspiciousAccounts: 3
deviceMemory: 16firstSeen: trueemailType: temporaryfingerprint: 8b7c672459f81f3f476d35ab
canvasHash: 8a3f91bsessionTrustScore: 5movements: Fast
deviceType: MobilehardwareConcurrency: 32ipType: DataCentersuspiciousAccounts: 3
deviceMemory: 16firstSeen: trueemailType: temporaryfingerprint: 8b7c672459f81f3f476d35ab
canvasHash: 8a3f91bsessionTrustScore: 5movements: Fast
BLOCKCHALLENGEALLOW

Risk Scoring

All signals feed into a single risk score per request. Set your own thresholds to control how strictly duplicate accounts are handled.

See Multi-Accounting Detection in Action

Leave your email and we'll reach out to schedule a live demo.

Protect Every Industry From Multi-Account Abuse

Multi-Accounting in iGaming

Online gaming and gambling platforms are among the most targeted by multi-accounting fraud. Each attack type exploits a different mechanic, but they all start the same way: one person, multiple accounts.

Bonus Abuse

Farming welcome bonuses and free bets across duplicate accounts at scale.
X 0

Ban Evasion

Banned players returning under new accounts, bypassing platform restrictions.
BANNED
NEW

Chip Dumping

Transferring chips between own accounts to launder money or feed a primary account.

Gnoming

Playing through fake or borrowed accounts in poker to hide identity and gain unfair table advantage.
NEW
BANNED
NEW
X 0
Same Controller

Smurfing

High-ranked players creating low-level accounts to compete against beginners without risk to their main rating.
NEW

Multi-Accounting Detection That Works

99%+ Detection Accuracy

Detects account takeover attacks in real time, even when attackers use VPNs, proxies, or headless browsers to evade detection.

Zero Friction for Real Users

Prevents account takeover attacks without impacting legitimate users. Only suspicious logins are challenged. Trusted users experience zero friction.

All-in-One Protection Platform

Protects against phishing, bot attacks, and fraud. Adapts to your business needs.
$0 Free Tier

Enterprise Features, Startup Price

Enterprise-grade ATO protection software. Starting at $0/mo — no sales calls, no minimum contract.

5-Minute Integration

Integrate with any auth system in minutes using 10+ SDKs
JavaScriptReactVueNode.jsJavaPHPand more..

GDPR Compliant & Privacy-First

GDPR compliant by design. Protects user data while stopping account takeover attacks.

Works With Your Stack

Developers can get started quickly with our robust developer features including intuitive APIs and extensive documentation.

Start using bot protection on the client-side

Integrate BotBye easily on the client side via the JS Tag or NPM integration.Read the docs
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
import {
 initChallenges,
 runChallenge
} from "botbye-client";

initChallenges({
 // Project Client Key
 clientKey: "00000000-0000-...",
})

// Add token to request
const makeSomeCall = async () => {
 const token = await runChallenge();

 return fetch(
  'https://somedomain.com',
  {
    method: "POST",
    headers: {
     "BotBye-Token": token
    }
  })
}

Back-End API Response

Make decision-making easier — BotBye will return an response, and you can automatically approve or decline requests in real time to keep your process seamless and secure.Read the docs
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
{
  "reqId": "f77b2abd-c5d7-....",
  "result": {
     // Bot detected
    "isAllowed": false
  },
  "error": null,
  // Project > More > API Extra Data
  "extraData": {
    "ip": "192.168.1.1",
    "asn": "AMAZON-AES",
    "country": "USA",
    "browser": "Android WebView",
    "browserVersion": "66.0",
    "deviceName": "Galaxy S9",
    "deviceType": "Mobile Phone",
    "deviceCodeName": "SM-G960F",
    "platform": "Android OS",
    "platformVersion": "8.0"
  }
}

Universal Protection Against Multi-Accounting

Keep your websites, mobile apps, and APIs secure from duplicate accounts and fraud rings, protecting your promo budgets, metrics, and revenue from day one.
From SpamStopping automated junk submissions through forms.
API AbuseBlocking excessive and unauthorized API requests.
Brute Force AttackBlocking fake user registrations attempts.
Account TakeoverPreventing unauthorized logins with stolen credentials.
Data ScrapingBlocking bots that harvest your content.
Coupon FraudPreventing abuse of promo codes and discounts.
Account SharingDetecting credentials shared across many users.
Fake AccountBlocking automated credential attacks.

FAQ

What is multi-accounting?
Multi-accounting is when one person creates multiple accounts under different identities to exploit a platform. It drives referral fraud, promo abuse, ban evasion, free trial farming, and fake engagement across e-commerce, fintech, iGaming, SaaS, and marketplaces.
How to prevent multi-accounting fraud?
Detect it at the point of account creation and login. BotBye scores every request against device, network, and behavioral signals and returns a decision (allow, challenge, or block) your backend enforces.
Can BotBye detect multi-accounting for referrals?
Yes. BotBye identifies when multiple accounts are created from the same device or network to exploit referral programs, sign-up bonuses, and promotional campaigns.
How do you detect duplicate accounts?
By linking accounts back to the same device, network, or behavioral pattern. Simple checks like email or IP matching are easy to bypass. BotBye uses persistent device identification combined with VPN/proxy detection and behavioral analysis.
Does BotBye block legitimate users?
BotBye is designed for low false positives. Configurable thresholds and the Challenge system handle shared households and legitimate multi-device usage. Suspicious requests can be challenged instead of blocked outright.

Start Protecting Your Platform

Detect duplicate accounts and block multi-accounting fraud in real time. Starting at $0.
No sales callsNo hidden feesNo credit card required