Glossary

What is a device farm?

A device farm is a group of real smartphones or tablets, often dozens to thousands, controlled centrally by one operator. App developers rent device farms for testing. Fraud operators build their own, also called phone farms or click farms, to create accounts, install apps, claim rewards and generate fake engagement that looks like it came from many separate customers.

How a device farm works

A fraud device farm is usually shelves or racks of cheap phones, each plugged into power and connected to a central computer. Software on that computer can mirror all screens at once, send the same tap to every phone, run scripts that install and open apps, and reset devices between tasks. Each phone has its own SIM card or connects through its own mobile proxy, so every device appears on a different carrier IP.

Some farms are run by people who tap through tasks by hand, often in low-wage settings. Others are almost fully automated. Newer setups skip the phone case and screen entirely and run bare phone circuit boards in dense racks, sometimes offered as rented "cloud phones".

Why device farms matter

Device farms exist because real hardware beats most device checks. An emulator or virtual machine has to fake being a phone. A farm phone is a phone: it has real sensors, a real processor, a real operating system and a real carrier connection. It passes the checks that catch simulated devices, which is why farms are used where the payout justifies the hardware cost.

  • Fake installs and engagement: app store rankings, ad attribution fraud, likes and follows.
  • Account creation at scale: fake accounts for marketplaces, social apps and messaging.
  • Reward farming: signup bonuses, referral payouts and bonus abuse in iGaming and fintech apps.
  • SMS and OTP abuse: triggering verification messages or receiving them on farm SIM cards.

Farms also reuse devices. A single phone may be reset and re-registered many times, each time with a new account, a new SIM or proxy exit and a freshly installed app. To a business looking only at that day's signups, each reset looks like a new customer on a genuine phone.

Device farm vs emulator farm

Emulator farm

  • Software phones on a few computers
  • Cheap to scale, a new phone is a file copy
  • Fake sensors and hardware can be exposed
  • Usually connects from hosting networks

Device farm

  • Real phones on racks or shelves
  • Costs money per device and per SIM
  • Genuine hardware passes device checks
  • Connects through real carrier networks

What gives a device farm away

Each phone looks real. The farm shows up in what the phones have in common.

  • Identical fleets

    Many devices of the same model, software build and settings appear at once, all brand new.

  • Always plugged in

    Batteries stay charging around the clock, and phones barely move or tilt.

  • Synchronized behavior

    The same actions happen on many devices within seconds, at machine-like intervals.

  • Shared location

    Devices cluster in one place while their IPs rotate across a carrier's network.

How to detect device farms

Checks that ask "is this a real phone?" will say yes. The useful questions are about the group: how many new devices share the same traits, behavior and timing, and how often each one resets. Kavra's native SDKs and web script read device and environment signals, and its identity and device linking connects new devices to the actor behind them. Coordinated campaigns show up as surges of new devices, shared infrastructure and velocity anomalies. See device farm detection.

FAQ

Frequently asked questions

Something else? Talk to our team.

Why do fraudsters use real phones instead of emulators?

Because real phones pass the checks that catch emulators: genuine sensors, battery behavior, graphics hardware and app attestation. The trade-off is cost and speed, so real-phone farms are used where rewards are high, such as app installs, referral payouts and bonus claims.

Is a device farm the same as a click farm?

Not exactly. A device farm is the hardware: many real phones controlled by one operator. A click farm is one use of it, producing fake clicks, likes, installs or reviews, sometimes with human workers tapping screens. Many click farms run on device farms, but device farms also serve referral abuse, account farming and fake signups.

Can a device farm pass mobile attestation checks?

Often, yes, because the phones are genuine and may run unmodified software. Attestation confirms the device and app are real, not that a real, independent person is using them. That is why device farm detection has to look at patterns across devices, such as identical fleets, synchronized actions and constant charging, rather than at one device at a time.

See who is really on your site.

Run Kavra on your own traffic in observe-only mode. No risk to your customers, and a clear report of the fraud it finds.