What is ban evasion?

Ban evasion is the practice of regaining access to a product or platform after being suspended or banned, by registering a new account rather than appealing the original decision. The replacement account typically carries a new email address and username while running from the same device, browser, and network as the account that was removed.

How ban evasion works

The method requires no talent whatsoever. Our returning friend picks up a fresh address from a free or disposable provider, invents a username, and signs up again. He may clear the cookies or open an incognito window under the impression that this constitutes a disguise. If the ban was tied to an IP address, restarting the router often settles the matter.

Some returners are more thorough. After four or five removals, the persistent perisher may work out that the machine is giving the game away and start changing browsers, switching to a VPN, or reaching for an anti-detect browser to present a new device fingerprint on every return. At that point the giveaway moves from the hardware to the behavior, which is considerably harder to replace than a browser profile.

Why it matters

A ban that does not hold is not an enforcement action; it is a delay. Moderation and trust-and-safety work is expensive, and every removal quietly reversed by its subject turns that effort into a treadmill. The failure lands hardest on whoever reported the problem. A user who was harassed, scammed, or spammed sees the same party return within a week and reasonably concludes that reporting it was pointless. Large platforms treat it as a distinct offense for exactly this reason: Reddit and Discord both name ban evasion in policy and action the replacement account on top of whatever the original ban was for.

How ban evasion is detected

Detection depends on recognizing the person rather than the credentials. Device fingerprinting can identify the returning browser and machine despite the new email address; an identity graph links the new account to the removed one through shared devices, networks, and sessions; and behavioral comparison catches activity that matches the closed account even after every identifier has changed.

In Dregs, a new account linked to one that was previously removed surfaces as suspicious activity, with the connecting evidence attached. The relationship feeds the Uniqueness score. The link is inspectable rather than asserted, so a reviewer can see exactly why two accounts were connected before acting on it. That inspectability matters here more than in most places, because the cost of a false positive is removing somebody who merely shares a household or office with a banned user.

Frequently Asked Questions

Q: Why do email and IP bans fail to stop ban evasion?

A: Because both are trivially cheap to change. A fresh email address costs nothing and takes seconds, and a residential IP rotates on its own when the router restarts. Banning either one removes the account, not the person. Worse, IP bans have a blast radius: block a carrier CGNAT address or a university network and you remove a great many people who did nothing at all. The signals that survive a ban are the ones the returning user cannot cheaply replace, which means device characteristics and behavioral patterns.

Q: How is ban evasion different from multi-accounting?

A: Multi-accounting is running several accounts at once, usually to multiply some benefit like a free trial or a referral bounty. Ban evasion is running one account at a time, sequentially, to undo an enforcement decision. The detection machinery overlaps almost completely (both come down to linking accounts that share devices, networks, and behavior) but the intent and the response differ: one is abuse of your terms, the other is a direct refusal of them.

Q: Is ban evasion illegal?

A: In most cases it is a terms-of-service violation rather than a crime, and the remedy is the one you already have: remove the account again. Where the original ban followed genuinely unlawful conduct such as harassment, fraud, or credential theft, the return can form part of a larger case, but that is a matter for counsel rather than for the signup form.

Detect and stop ban evasion on your platform.

Dregs helps you stop banned users from returning under new accounts. It links each signup to accounts sharing the same devices, networks, and behavior, so ban evasion surfaces before it reaches your moderation queue again.

Schedule a Demo