Detecting Multi-Accounting with Device Intelligence

Multi-accounting is one person, household, or device opening many product accounts. The tell is not a new email. It is the **same device fingerprint** (or a tight cluster of fingerprints) tied to several customer.externalId values, often with signup velocity and recycled payment instruments.

A fingerprint without that join cannot tell you “this phone opened four wallets.” Send registration, login, and first-funding events with both keys. Count customers per device in a named window. Three-plus accounts on one device is usually REVIEW, not an automatic BLOCK. Families share tablets. Analysts confirm farms, then you list the fingerprint.

What not to collapse

Promo abuse, mule onboarding, and card testing can look like the same burst. Instrument the event type. A bonus claim is not a payout. A payout with many counterparties is a different typology—screen the far side with the AML API as well.

Naiza attaches device context to fraud events and supports listing a fingerprint. Public pages describe 150+ SDK signals and flagging devices linked to multiple accounts—confirm thresholds in the docs. Definitions: multi-accounting, device linking, device fingerprinting, promo abuse.

Compare device intelligence with IP-only checks if your stack is still a VPN list.