Account Fraud Prevention

Stop new account fraud at signup

Prevent promo abuse, fake signups, and multi-accounting without adding friction for real users, through persistent identification and real-time risk scoring

Account Fraud Prevention illustration

How ShieldLabs helps

Prevent incentive fraud

Block bonus, promo, and referral farming across multiple fake accounts

Prevent trial fraud

Stop free trial abuse and block repeat attempts before another cycle begins

Prevent ban evasion

Keep banned users from bypassing restrictions and returning under a new identity

Distinguish anonymous from real users

Legitimate signups go through without extra friction or added verification steps

How ShieldLabs prevents account fraud

ShieldLabs recognizes the real visitor behind every anonymous session, so your team can stop fraudulent account creation in real time

Accurate Identification

Identify returning visitors and users across sessions, cleared cookies, rotated IP and incognito mode

Accurate Identification

Risk Signals

Detection of VPN, proxy, Tor, anti-detect browser, geolocation spoofing, IP reputation and other risk signals on every visit, with 99.9% risk signal detection accuracy

Risk Signals

Risk Score

A ready-to-use score reflecting the risk of each visit, with the weight of every signal behind it

Risk Score

High-Risk Events

High-Risk Events detected out of the box: multi-accounting, account sharing, impossible travel and account takeover, each with Medium or High confidence

High-Risk Events

Real-Time Analytics

See how much of your traffic is masked, with an overall quality score and a breakdown of the sources sending your visits

Real-Time Analytics

Prevent revenue loss and wasted marketing budget

New account fraud prevention for every platform

SaaS & Subscriptions

Stop free trial cycling and plan limit abuse from the same person opening account after account

Marketplaces & E-commerce

Catch referral farming, welcome bonus abuse, and promo fraud before payouts hit your books

iGaming & Online Gambling

Spot bonus abuse, affiliate fraud, multi-accounting, and banned players returning under a new identity

Crypto & Web3

Defend crypto airdrops and reward campaigns from sybil abuse and farming activity

Start preventing new account fraud in 5 minutes

Easily integrate into any signup or onboarding flow

  1. 1

    Create your account

    Get 5,000 free identifications

  2. 2

    Add the snippet

    It identifies every visitor and returns their risk signals and a risk score

  3. 3

    Check your traffic quality

    See how much of your traffic is masked, with an overall traffic score

  4. 4

    Use the API and Webhooks

    Get the risk score, risk signals and High-Risk Events in your backend to stop fraud and abuse

api.shieldlabs.ai/v1/visits/latest
{
  "request_id": "0c284695-cf0b-4755-8beb-0a2e9536595e",
  "visitor_id": "aa8c616a-8a25-4a5e-bee2-a9a08e5128a4",
  "device_id": "6a45967d-1371-9652-ba99-b01ea3992208",
  "user_hid": "u_9f2a41c7",
  "public_ip": { "ip": "62.197.149.124", "country": "United States" },
  "local_ip": { "ip": "45.83.91.7", "country": "United States" },
  "connection_type": "vpn",
  "os": "Windows",
  "browser": "Chrome",
  "device_type": "desktop",
  "risk_score": 85,
  "signals": [
    { "name": "antidetect_browser", "weight": 60 },
    { "name": "vpn", "weight": 15 },
    { "name": "timezone_mismatch", "weight": 10 }
  ]
}

Start detecting fake signups today

Free 5,000 one-time identifications, with transparent pricing that scales with your needs

Frequently asked questions

New account fraud is when one person creates multiple accounts to claim benefits they have already used or to bypass a restriction. It looks legitimate to standard signup checks because every account uses a different email and IP.

  • Abuse-motivated: repeatedly claiming free trials, welcome bonuses, or referral payouts across fresh accounts.
  • Evasion-motivated: returning after a ban or restriction under a new identity.
  • Common surface: SaaS trials, marketplace promos, iGaming bonuses, and crypto airdrops.

ShieldLabs assigns a persistent identifier on every visit that lets you spot the same person creating new accounts, regardless of email, IP, or cleared cookies.

The two types of new account fraud are abuse-motivated and evasion-motivated. Both produce the same underlying signal: one persistent visitor behind multiple accounts.

  • Abuse-motivated: opening fresh accounts to repeatedly claim free trials, bonuses, or referral payouts.
  • Evasion-motivated: returning after a ban or restriction under a new identity to regain access.

ShieldLabs links related accounts back to one persistent identity and detects both behaviors as multi-accounting, a High-Risk Event, so your team can act on the signal that fits each case.

ShieldLabs detects fake accounts at signup by assigning a persistent identifier on the first visit and recognizing the same person when they return under a new email, IP, or browser. The first risk score is available on that first visit.

  • Persistent identification: holds across cleared cookies, rotated IP, and incognito mode.
  • 300+ signals: evaluated across device, OS, browser, IP, and network layers, including VPN, proxy, anti-detect browser, and other risk signals.
  • High-Risk Events: related accounts are detected as multi-accounting with Medium or High confidence.

ShieldLabs returns a 0-100 risk score with a full signal breakdown on every visitor or user, delivered via the analytics dashboard, API, and Webhooks, so your team can act before the account is created.

Fake account prevention works by identifying the person behind each signup before any verification email is sent, then flagging the risky ones so your team can act. It starts at the signup form, not after the account already exists.

  • Identify: ShieldLabs returns a persistent visitor identifier and a 0-100 risk score on every registration.
  • Correlate: related accounts are linked back to one identity and detected as multi-accounting.
  • Act: step up verification or block the session, based on the result.

ShieldLabs flags fake signups and helps block fraudulent and abusive traffic before the account exists.

ShieldLabs stops fake signups by flagging them and helping block fraudulent and abusive traffic. You choose the action for each case.

  • You receive: a 0-100 risk score, a full breakdown of risk signals, and High-Risk Events such as multi-accounting.
  • You choose the action: for example, a Suspicious score (30-59) can step up to phone verification, and a Dangerous score (60-100) can block account creation.
  • You see it first: the free tier includes 5,000 identifications to see the results on your own traffic.

ShieldLabs shows the signals behind every score, so each decision is explainable.

Email validation and CAPTCHA check whether a single signup looks human and reachable, but they have no memory of who signed up before. ShieldLabs adds persistent identity, so a returning person is recognized across signups.

  • Email validation / CAPTCHA: verify the current session in isolation; a fresh email or solved challenge passes every time.
  • ShieldLabs: assigns a persistent identifier that survives cleared cookies, rotated IP, and incognito mode.

ShieldLabs links a person's third account back to their first as the same visitor, regardless of email address, IP, or cleared cookies, which one-time checks cannot do.

Multi-accounting is one person creating and operating multiple accounts on the same platform to gain benefits a single account would not get. Each account looks legitimate to standard verification because the email, IP, and browser differ.

  • What it enables: abuse of free trials, referral programs, welcome bonuses, and plan limits.
  • Why it's hard to catch: no single signup looks suspicious on its own; the pattern only appears when accounts are connected.

ShieldLabs lets your team identify multi-accounting by linking related accounts to one persistent identity and detecting multi-accounting when many accounts sit behind a single visitor.

Fake account fraud is when someone registers accounts with fabricated or recycled identities to abuse platform benefits, bypass restrictions, or manipulate metrics. Because the identity details are disposable, the only reliable signal is the visitor's persistent identity and connection.

  • Fabricated identities: new emails and details per account to claim benefits again.
  • Recycled identities: banned or flagged users returning under a new persona.
  • What stays constant: the underlying device, browser, and network characteristics.

ShieldLabs assigns a persistent identifier on every visit and detects multi-accounting when the same person registers under a new identity.

Detect multi-account fraud at signup by linking each new registration to a persistent identity that holds across cleared cookies, rotated IP, and incognito mode. When the same person opens a second or third account, the connection becomes visible even though every account uses different details.

  • Identify: assign a persistent identifier on the first visit, with the first risk score on that visit.
  • Correlate: analyze 300+ device, OS, browser, and network signals to connect related accounts.
  • Flag: ShieldLabs detects multi-accounting with Medium or High confidence.

ShieldLabs runs this in real time on every visitor or user, so your team can act on the High-Risk Event before a duplicate account is approved.

Free trial abuse is when the same person repeatedly opens new accounts to claim a trial period they have already used. It is one of the most common forms of new account fraud on SaaS and subscription platforms.

  • Why it slips through: email validation and IP blocks see each fresh signup as a new user.
  • What it costs: repeated free usage, inflated trial metrics, and lost conversions to paid plans.

ShieldLabs links every signup to a persistent identity and detects repeat trials as multi-accounting, so your team can require verification or block the account via API before the new trial starts.