Device ban: how to block a repeat offender so the ban survives a new account
A device ban makes a ban stick to the device, not the account, so a banned user cannot walk back in under a fresh email. How it works and how to build it.
Blog / Detection
Detection
How to detect click farms
What a click farm is, how phone farms mass-produce fake installs, signups, and clicks, and how the devices behind that activity cluster back to one operation.
How to detect invalid traffic (IVT): types, causes, and signals
How to detect invalid traffic (IVT): the GIVT vs SIVT split, what causes it, and the signals advertisers use to catch the traffic draining ad budgets.
Account recovery fraud: how attackers take over accounts through the reset flow
Account recovery fraud is how attackers bypass strong login by abusing the reset flow. How it works, why recovery is the weak point, and how to defend it.
How to detect fake reviews
What review fraud is, the main types of fake reviews, why the text alone won't catch them, and how the device behind a review ring gives it away.
Payment gateway fraud detection: how the layers work, and what each one misses
How payment gateway fraud detection works, layer by layer, what each layer catches and misses, and where reading the device behind the checkout fits in.
How to detect ad fraud: types, cost, and the signals that catch it
How to detect ad fraud: the fake clicks, impressions, installs, and leads that drain ad budgets, the main types, what each costs, and the signals that catch them.
How ban evasion detection works: re-identifying returning banned users
How ban evasion detection works: why account-only bans fail, the signals that re-identify a returning banned user, and how detection ties a new signup to the old account.
How to detect geolocation spoofing and prevent fraud
How to detect geolocation spoofing: how it works, why a single IP check fails, and how layered signals expose the mismatch so your team can prevent fraud.
How to detect anti-fingerprint browsers (2026)
Anti-fingerprint browsers spoof canvas, WebGL, fonts, and TLS to break recognition. How to detect them in 2026: the fingerprinting methods and the tells they leave.
How to identify anonymous traffic and visitors
How to identify anonymous traffic and recognize returning visitors hidden behind VPNs, proxies, Tor, Private Relay, and anti-detect browsers.
How to detect Tor traffic without blocking real users
Detecting Tor traffic is easy because exit nodes are public. The hard part is acting on it without blocking real users. How web detection actually works.
Impossible travel detection: reading the device behind the location
Impossible travel detection flags an account logging in from two far-apart places. Why velocity alone over-fires on VPNs, and how the device fixes it.
Account takeover detection for web apps: the signal layer at login
How to detect account takeover at login: the device and network signals that flag a suspicious login, why MFA alone misses them, and where the gap is.
How to detect VPNs in 2026
How to detect VPNs in 2026: the methods that actually work, why an IP check alone fails, and how masked traffic ties to abuse and risk.
Residential proxy detection: why home IPs are the hardest to catch, and how detection actually works
What a residential proxy is, where the home IPs come from, why IP checks miss them, and how residential proxy detection actually works without relying on the address.
How to detect account sharing?
How account sharing detection works: counting the distinct devices behind one login, the signals that reveal it, and how to act without false positives.
Proxy detection for fraud prevention: how to identify hidden traffic sources
How proxy detection works for fraud prevention: 13 techniques, why residential proxies are hard to spot, and why an IP check alone is never enough.
How to detect anti-detect browsers in 2026
Anti-detect browsers fake a new device per profile to power multi-accounting. How to detect them: the signals that expose them and why no one check is enough.