Fake account creation builds online identities that are not tied to a real customer and then uses them at very large scale.
The accounts exist to send junk, hold goods, distort reviews, or hide who is really acting, not to serve a person.
How it works
Automation can open many accounts faster than staff can welcome real customers, and each account may look thin but plausible.
Harm includes spam, fraud, skewed metrics, and support cost, even when a single account seems harmless.
Proportionate checks at signup raise the cost of bulk creation without making a genuine person give up.
Proof of work, limits on creation rate, and review of clusters that share the same timing are defenses, not a recipe for building the accounts.
Concrete examples
- A new service receives thousands of accounts in an hour, none of which ever returns after the first automated action.
- Review scores jump because many fresh accounts praise the same seller within minutes of being created.
- Support is flooded by accounts that exist only to probe password reset and then disappear.
Protective measures
- Raise the cost of creating an account in bulk so a script cannot open thousands for the effort of one person.
- Limit the creation rate from one client and review clusters created in the same minute.
- Watch what new accounts do next, and restrict those that only send junk or hold inventory.
- Keep signup friction proportionate so real customers can still register without a maze.
How CDPCaptcha helps
Proof of work raises the cost of scripts that open large numbers of accounts without a real customer behind them.
CDPCaptcha is a self-hosted proof of work check in the browser, with no cookies, no tracking, and no picture puzzles.
It is made and hosted in the EU, in Germany, and the service is described at https://cdpcaptcha.com/.
Related articles
Account checks sit inside the broader loss reduction program described in What is fraud prevention?.
Shop orders placed through identities that are not real customers are treated in What is ecommerce fraud?.
One signal sometimes used to notice clusters of new clients is explained in What is device fingerprinting?.