What is account farming?

Account farming is the practice of creating or warming up accounts in bulk, then aging them so they look trustworthy before they are used for abuse. The accounts are registered ahead of need, given a little ordinary activity so they are not brand new, and held until the benefit is worth taking.

What account farming is for

The wait is the point. A signup that burns a free trial, collects a launch credit, or cashes a referral payout on the day it is created looks like what it is. An account that has sat quietly, with a name and a short history, gets treated as a customer. The same batch can be aimed at signup credits, promo codes, referral bounties, or a free API tier.

The more industrious of these pests does not meet the product on the morning the benefit is taken. The accounts were stock, warmed just enough to look used, and left on the shelf until the offer was worth spending.

How the accounts get aged

Creation is the easy half. Warming is a login a few days later, a settings change, a page opened and closed, and then nothing, on purpose. The age is what gets sold, or saved for later. A bot farm can mint the registrations, a phone farm can put a real handset behind each one, and a sock puppet account is what one of them becomes when it has to pass as an independent person. Account farming is the aging those setups share.

Why a check on the request misses them

A bot check on a single request asks whether this submission looks automated. By the time a farmed account is used, that request is long gone, and the later one can be a person clicking through or a script paced to look like a person. Nothing about that request says it belonged to a batch, was warmed on a schedule, and was kept until it was useful. The tell is the history.

How Dregs scores farmed accounts

Dregs scores each identity across the activity it has already seen, and scores that identity again as new behavior arrives. An account that looked quiet at signup can look different the week it redeems a credit or collects a referral, moments after the new activity arrives. Shared devices, networks, sessions, and behavior still tie a batch together, and the identity graph holds those connections. Linkage feeds Uniqueness, implausible profile data feeds Authenticity, automation feeds Humanity, and later use feeds Behavior.

Every score opens into its observations, so you can see exactly why an account was flagged and catch false positives with less manual review. A pattern you already recognize can be captured in custom rules and lists. Where your product reports groups, that context can inform scoring. Each member is still scored as an identity.

Frequently Asked Questions

Q: What is account farming?

A: Account farming is creating or warming up accounts in bulk, then aging them so they look trustworthy before they are used for abuse. On a SaaS product the later use is usually a free trial, a credit, a referral or promo payout, or a free API tier. The accounts are registered ahead of need and given a little ordinary activity so they are not brand new when the benefit is taken.

Q: How is account farming different from a bot farm or a phone farm?

A: A bot farm is a pool of automated accounts run together. A phone farm is a bank of handsets or emulated devices operated together. Account farming is the practice of creating or warming accounts and then aging them before use. The accounts can come from either kind of farm, or from someone working through a batch by hand. A sock puppet account is one extra identity presented as an independent person. Account farming is the bulk version, with the wait built in.

Q: How do you detect account farming?

A: Not from a single request. Aged accounts are built to pass a check that only looks at the signup in front of it. Detection looks at the account over time, and at the batch: shared devices, networks, sessions, and behavior, plus activity that stays thin until a trial, credit, or payout is collected. Dregs scores each identity again as new behavior arrives, and every score opens into its observations so you can see exactly why it was flagged and avoid false positives. Custom rules and lists can capture a pattern you already recognize, which means less manual review on the next batch.

Detect account farming before aged accounts drain trials and payouts.

Dregs helps you detect account farming by scoring each identity again as new behavior arrives. Linked accounts and later redemptions show up in the observations behind the scores, so a batch of aged accounts is visible with less manual review.

Start Free Trial