Topic starter
01/08/2026 8:52 pm
TL;DR: Akamai reported AI-powered bot traffic increased 300% in a year, while Sumsub found multi-step identity fraud rose from 10% of attacks in 2024 to 28% in 2025, showing that signup fraud is becoming more automated and coordinated, according to Sift's analysis. Single checks no longer hold up against fraud rings that combine device, network, behavioral, and identity signals.
Editorial analysis by NHI Mgmt Group, based on content published by Sift: “Fake Account Detection: The Technical Signals That Expose Fraudulent Signups”.
Key questions
Q: What breaks when fake account detection relies on a single check?
A: A single check only sees one layer of risk, so fraudsters can route around it by changing the specific artefact that control inspects.
Q: Why do layered signals catch more fake accounts than identity verification alone?
A: Identity verification can confirm that a document or selfie looks valid, but it does not tell you whether the applicant is part of a coordinated fraud operation.
Q: What are the signs that a login or signup flow is being abused by bots?
A: Common warning signs include unrealistically fast actions, repeated attempts at high volume, limited behavioral flexibility, and inconsistencies with a user’s normal device or location pattern.
Practitioner guidance
- Implement layered signup scoring Combine device, network, behavioural, and identity data into a single risk decision so no single check can be gamed in isolation.
- Add adaptive friction for higher-risk signups Route clean traffic through with minimal delay and escalate only the suspicious cohort to extra verification steps such as email or phone confirmation.
- Review post-signup behaviour continuously Re-score accounts after creation so a signup that looks legitimate at first can still be challenged if it later shares infrastructure or abuse patterns with other accounts.
Bottom line: Fake account abuse is no longer a simple signup nuisance because fraudsters now combine automated tooling, synthetic identity elements, and coordinated infrastructure.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
01/08/2026 9:01 pm
Layered signal analysis is now the minimum viable control for fake account governance. Single checks fail because fraud rings can adapt one artefact at a time, while the platform still treats the signup as trustworthy. Device, network, behaviour, and identity telemetry only becomes useful when it is fused into one decision model. Practitioners should treat trust as a scored outcome, not a checkbox.
A question worth separating out:
Q: How should fraud teams respond when fake accounts are linked across many registrations?
A: Treat the pattern as a cluster problem, not an isolated account review. Review shared infrastructure, verify whether the same device or network pattern appears across multiple signups, and use the confirmed cases to tune scoring, challenge rules, and analyst escalation so the next wave is caught sooner.
👉 Read our full editorial: Fake account detection depends on layered signals, not single checks