What counts as a fake account
The name on a fake account may be real or invented; what makes it fake is that the account does not stand for the customer the business thinks it has. It might be one of fifty accounts one person runs, an account a bot created with a disposable inbox, a profile made to look like a well-known brand, or an account bought ready-made from a seller who produces them in bulk.
Fake accounts are the raw material for many other attacks. They collect promo and signup rewards, post spam and phishing links, leave fake reviews, pump SMS verification costs, and give scammers a clean identity on marketplaces and social apps.
Common types of fake accounts
| Type | Who makes it | Typical purpose |
|---|---|---|
| Bot-created account | Signup scripts and automated browsers | Farming rewards, spam, reselling accounts |
| Farmed account | People or device farms working through signups by hand | Passing checks that bots fail, selling aged accounts |
| Duplicate account | One person, many accounts | Repeat offers, ban evasion, multi-accounting |
| Impersonation account | Scammers | Posing as a brand, seller or support agent |
| Synthetic identity account | Organized fraud rings | Building credit or trust to cash out later |
How fake accounts show up in real traffic
Individually, a fake signup can look perfect: valid email, working phone number, sensible name. The giveaways are in how it was made and what it shares with others. Accounts created in bursts right after a promotion, from devices that contradict themselves, through residential proxies, with forms filled in at machine speed, are rarely real customers. Neither are accounts that verify, claim a reward and never return.
The cost lands in several places at once: promotion budgets paid to nobody, SMS bills for verification codes, moderation time spent on spam, and real customers who stop trusting reviews, sellers or messages on the platform.
- Many new accounts from one real device behind rotating fingerprints.
- Email addresses that follow a pattern or come from disposable domains.
- Virtual or recycled phone numbers used for verification.
- Identical form timing, paste events and navigation paths.
- No activity after the first reward, trial or message.
Fake account vs synthetic identity
Fake account
- Any account not tied to a genuine customer
- Often cheap, disposable and made in bulk
- Goal is usually quick value: rewards, spam, scams
- Found by linking devices, networks and behavior
Synthetic identity
- A made-up person built from real and invented data
- Built slowly to pass identity and credit checks
- Goal is to borrow or transact, then disappear
- Found by identity data checks plus device links
How to stop fake accounts
Email and phone verification cost fraudsters very little, and CAPTCHAs are solved by services and farm workers. The check that works is at signup, on the device and behavior: is this a real browser operated by a person, and has this actor already opened accounts here? Kavra answers both on every signup and recommends allow, verify or block, invisibly for real users. The full playbook is on the fake account detection page. For the harder, slower case, read about synthetic identity fraud.