Multi-Accounting

Multi-accounting is operating several accounts on the same service. It becomes abuse when those accounts are used to evade restrictions, claim benefits repeatedly, or conceal coordinated activity. Multiple accounts can also be legitimate, depending on the service’s rules.^[1][2]

The investigation needs to connect account activity with the benefit or restriction being manipulated. A shared phone or IP address is useful context, but it does not prove that accounts belong to one person or that an offer has been abused.^[3]

Examples

• An operator creates both sides of a referral to collect rewards intended for independent customers.
• A restricted user returns through new accounts and altered device claims.
• A group of accounts repeatedly claims an introductory discount or other limited benefit.

How Cipherstep helps

Fresh signup or claim-time attestation adds supported device and runtime findings to the account record. The Data Explorer gives analysts access to available evaluations and user/device history so they can investigate apparently separate registrations. Tampering, emulation, or replay findings can provide additional context.

With customer-supplied network context and enough tenant-local history, Cipherstep can surface concentrated account/device activity or unusual new-user velocity for review. Reporting, Cipherstep Agent, and alert channels help analysts investigate the pattern and carry evidence into a case.

Your team combines those findings with referral relationships, payout destinations, and eligibility records before enforcing its rules. Multi-accounting can use ordinary, untampered phones. Attestation does not replace reward limits or establish permanent device identity across every reset.