Multi-Accounting Fraud: One User, Many Fake Accounts

Multi-accounting fraud is when one person or group controls many accounts on a platform to claim rewards, credit or advantages meant for single users. It drains promo budgets, referral programmes and lending limits. KYC often misses it because each account passes on its own, so device signals such as cloned apps and shared phones are what expose the pattern.

What Multi-Accounting Is

Simply put, multi-accounting is the practice of one user operating several accounts on the same service, usually against its rules. Sometimes, for example, it is a bargain hunter with two or three accounts. Other times, it is an organised group running hundreds of accounts from a handful of phones.

The motive is almost always the same: the platform limits something to “one per customer”. For instance, a sign-up bonus, a referral reward, a first-order discount or a starter credit limit only pays once per person. So a fraudster who looks like many people collects many times.

It overlaps with other fraud types, but it is not identical to them. For example, a multi-accounter might use their own real identity for one account, a relative’s for another and a bought or synthetic identity for the rest. The common thread is control, not the type of identity used.

Where Multi-Accounting Costs Money: Promos, Referrals, Cashback and Lending

In practice, multi-accounting shows up wherever a business pays to acquire or reward a new user. The table maps the common targets.

Target	How the abuse works	Typical cost
Sign-up bonuses	Each new account claims the welcome reward	Marketing budget spent on fake users
Referral programmes	One person refers their own fake accounts	Rewards paid on both sides of fake referrals
Cashback and first-order discounts	Repeated first orders through new accounts	Discounts that never create a loyal customer
Driver and rider incentives	Fake riders book trips with colluding drivers	Incentives paid on trips that never happened
Digital lending	Several small starter loans across accounts, then default	Credit losses that look like bad debt
Reviews and ratings	Many accounts post fake reviews	Damaged trust and distorted rankings

However, the damage goes beyond the direct loss. Growth metrics inflate, acquisition costs look better than they are, and genuine customers miss out when promotions run dry early. So marketing teams sometimes discover the problem only when the numbers stop adding up.

Why KYC Alone Misses Multi-Accounting

Meanwhile, KYC checks each identity on its own. It asks whether this person is real and matches their documents. It does not ask whether the same person already controls ten other accounts under different names.

That gap matters in three ways. First, multi-accounters often use real identities from relatives, friends or paid “account renters”, so each one passes. Second, many e-wallets and apps offer light onboarding tiers with minimal checks for small balances. Third, some groups use stolen or synthetic identities that pass basic document checks.

So the defence has to look across accounts, not just at each one. Two kinds of links do most of the work: the face behind the accounts and the device behind them. A one-to-many face search catches the same person under several names, while device signals catch one handset behind many identities. Our explainer on identity verification covers the onboarding side.

Device Signals That Expose Multi-Accounting

Running many accounts takes tools, and those tools also leave traces on the device. The signals below come from Verihubs Device Intelligence, and each maps to a common multi-accounting technique.

Device signal	What it catches
Cloned app	App-cloning tools that run several copies of the same app on one phone, each with its own account
Virtual OS	Virtual environments that run a separate copy of Android inside the phone
Secondary user profile	Extra user profiles on one device, used to keep accounts apart
Suspicious device sharing	One device used by several different user IDs in your app
Suspicious factory reset	Repeated resets to make a recycled phone look new
Emulator	Virtual phones on a computer, often run in farms
Device masking	Spoofed device specifications that disguise one phone as many
VPN, proxy and GPS spoofing	Fake locations that make accounts appear to come from different places
Auto clicker	Bots that run through signup and redemption steps automatically

No single signal proves fraud. Instead, patterns do. For instance, a phone with three cloned app instances, a fresh factory reset and five accounts created this week tells a far clearer story than any one flag. That is why these signals feed a risk score, which you then connect to your fraud detection system.

Multi-Accounting Red Flags Beyond the Device

Device signals carry most of the weight, but account and behaviour data add strong supporting evidence. Look for these patterns across new accounts:

• Shared payment methods. The same card, bank account or e-wallet funds several accounts.
• Sequential contact details. Email addresses that differ by one digit, or phone numbers bought in batches.
• Shared delivery addresses. Several “new” customers ship to the same house or locker.
• Identical behaviour. Accounts that sign up, redeem and go quiet in the same order and at the same speed.
• Tight referral loops. Referral chains where every account refers the next, with no outside activity.

Once mapped as a graph, these links show the shape of a ring. Typically, one device or payment method sits at the centre, with many thin accounts around it. Fraud teams that review the graph, rather than single accounts, can shut down a whole ring in one decision.

Measuring the Impact of Multi-Accounting

First, before tuning rules, measure the size of the problem. Three numbers usually tell the story.

1. Linked-account rate. The share of new accounts that link to another account through a device, payment method or face.
2. Reward leakage. The share of promotional spend that goes to linked accounts that never become active customers.
3. Genuine friction. The share of flagged households that pass a stronger check, which shows how often rules hit real users.

Then track these monthly. When leakage falls while genuine friction stays low, your rules are working.

Rules That Do Not Block Families Sharing a Phone

Still, the hardest part of fighting multi-accounting is not catching fraud. It is avoiding the punishment of genuine households. In many Southeast Asian markets, relatives share a handset, and used phones are common.

1. Score, do not ban. Treat “two accounts on one device” as a weak signal on its own, and act only when it combines with others.
2. Set household limits. Allow a small number of accounts per device, then require extra checks beyond that number.
3. Protect the reward, not the account. Let the account open, but hold the bonus until the user passes a stronger check or completes real activity.
4. Vest rewards over time. Pay referral rewards after the referred user makes genuine transactions, not at signup.
5. Use the face for high-value rewards. For large bonuses or credit limits, a selfie with liveness and a one-to-many face search confirms one person per reward.
6. Review clusters, not individuals. Look at groups of linked accounts together, since fraud rings show up as clusters.

As a bonus, this approach shifts the cost onto fraudsters. Genuine families barely notice, while a group running hundreds of accounts hits limits, holds and face checks at every turn.

Designing Promotions That Resist Multi-Accounting

Detection works best when teams design promotions with abuse in mind. A few design choices remove most of the incentive before any rule fires.

• Reward behaviour, not signups. Tie bonuses to a first real transaction or a period of activity.
• Cap per device and per payment method. Limit how many rewards one phone or one card can claim.
• Delay payouts. Hold cash rewards for a short period, so fraud teams can review suspicious clusters first.
• Verify before cash-out. Require identity checks before users can withdraw promotional balances.

Ultimately, promotions that pay out instantly and in cash attract the most abuse. Promotions that reward genuine usage attract the customers you actually want. For more on the wider defences, see our overview of a fraud prevention system.

Frequently Asked Questions About Multi-Accounting Fraud

What is multi-accounting fraud?

Multi-accounting fraud is when one person or group controls several accounts on a platform to claim rewards, discounts or credit meant for single users. It often targets sign-up bonuses, referral programmes and starter loans.

How do you detect multiple accounts from the same user?

Look for links across accounts: the same device, cloned apps, virtual OS tools, shared payment methods, repeated factory resets and the same face behind different names. Score these links together rather than acting on one.

Why does KYC not stop multi-accounting?

KYC checks each identity individually. Multi-accounters often use real identities from relatives or paid renters, so each account passes. So you need cross-account checks on devices and faces to see the pattern.

Is multi-accounting illegal?

It usually breaks a platform’s terms of service. When it involves false identities or deception to obtain money or credit, it can also amount to fraud under local law.

How can you stop multi-accounting without blocking families?

Allow a small number of accounts per device, hold rewards until users pass stronger checks, vest referral rewards over time and review clusters of linked accounts rather than banning on a single signal.

Multi-Accounting Fraud Is a Pattern, So Detect Patterns

In the end, each fake account in a multi-accounting scheme looks ordinary on its own. That is the whole trick. The fraud only becomes visible when you look across accounts and see the same device, the same cloned app or the same face behind them.

So build defences that see patterns. Link accounts through device signals and face searches, score the links instead of banning on one, and design promotions that pay for real behaviour. Fraud rings then lose their margin, while genuine customers, including families sharing one phone, keep a smooth experience.

Promo budgets disappearing faster than real customers arrive? Talk to Verihubs about device signals for multi-account detection.