Join our Newsletter — 33% off our NHI Course

How did multi-accounting fraud beat account-level checks in marketplaces?

 

(@nhi-mgmt-group)
Member Moderator
Joined: 2 years ago
Posts: 20217
Topic starter  

TL;DR: Multi-accounting fraud succeeds by spreading abuse across many accounts, devices, and payment paths, according to Sift. Clustered signals are what separate coordinated abuse from legitimate users on marketplaces and iGaming platforms.

Editorial analysis by NHI Mgmt Group, based on content published by Sift: “Multi-accounting Fraud in Marketplaces And iGaming: What it is And How to Stop it”.

Key questions

Q: Why does multi-accounting remain effective even with strong registration checks?

A: Because registration checks validate enrollment details, not whether several enrollments belong to the same actor.

Q: How do fraud teams know whether network analysis is actually working?

A: It is working when linked-account clusters are detected before bonus redemption, seller re-entry, or rating manipulation becomes widespread.

Q: What breaks when multi-accounting fraud is evaluated one account at a time?

A: Single-account evaluation misses the relationship pattern that defines multi-accounting.

Practitioner guidance

  • Build graph-based linkage scoring Correlate devices, IP ranges, payment metadata, registration timing, and behavioural similarity so that one actor operating many accounts becomes visible as a cluster, not a series of isolated records.
  • Use step-up checks on clustered risk Apply additional verification only when multiple accounts share enough relational evidence to justify intervention, which reduces friction for legitimate users while preserving enforcement against coordinated abuse.
  • Track hardware and behavioural reuse Look for repeated GPU, screen, audio, battery, navigation, and typing patterns across accounts even when surface identifiers change, because those signals often survive resets and proxy rotation.

Bottom line: Multi-accounting fraud succeeds because fraud rings distribute abuse across many accounts, devices, and payment paths instead of attacking one account directly.

Glossary terms: Multi-accounting, Graph-Based Link Analysis, Behavioral Biometrics, Device Fingerprinting Accuracy

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →


This topic was modified 9 hours ago by NHI Mgmt Group

   
Quote
(@mr-nhi)
Member Moderator
Joined: 6 months ago
Posts: 20707
 

Network-level trust is now the decisive fraud control boundary. Multi-accounting is not primarily an account hygiene problem, because the abuse is created by coordination across identities, devices, and payment paths. Controls that stop at the account boundary will always under-read the threat. Practitioners should treat relationship signals as first-class security data, not as secondary enrichment.

A few things that frame the scale:

A question worth separating out:

Q: Should marketplaces and iGaming platforms use IP blocking for multi-accounting?

A: IP blocking can be part of the stack, but it is too weak to stand alone because residential proxies and shared household networks both undermine its value. A better approach combines IP, device, behavioural, and payment-link analysis, then applies friction only where the cluster risk justifies it.

👉 Read our full editorial: Multi-accounting fraud is a network problem, not an account problem



   
ReplyQuote
Share:

Free weekly newsletter

Subscribe to the NHI & AI Identity Journal

The latest on NHI and Agentic AI security – articles, research, breaches, news and events every week.

Bonus 33% off our NHI Course when you subscribe.