Account Sharing – Castle
Account Sharing
Define account sharing your way
Uncovering account sharing requires granular controls to define the exact behavior that breaches your terms of services.
Real-time blocking
Rules execute in milliseconds to block account sharing inline without noticeable delay.
Custom definitions
Define account sharing your way using advanced filtering and real-time velocity queries.
Granular analytics
Leverage BI-grade analytics to expose account sharing and fraud rings at scale.
Data enrichment
Enriched with device intelligence, risk scores, velocity metrics, and much more.
Define account sharing using custom logic
Castle lets you use advanced filtering, real-time velocity queries, and custom lists to segment out account sharing with high precision.
- deny
- Unique count of Device Fingerprint by User ID in the last 10 min is > 5
- and Unique count of IP Address by User ID in the last 10 min is > 3
Action on account sharing in real-time
Rules execute in milliseconds and can be used to adapt the user experience based on risk in real-time.
- deny
- Abuse Score is > 90
- and Disposable Email is true
- and Count events Registration by Device Fingerprint in the last day is > 3
- or Signals include Blocked country
- Add User ID Warned Account Sharers
- Remove User ID Allowed Users
- Send webhook https://hooks.zapier.com/hooks/catch/4378238094/ch3dka
- Send to Slack #security-alerts
Real-time decisions
Assessments of data like user count per device or hourly failed logins executed in the blink of an eye.
Inline blocking
Initiate request blocks or step-up verifications anywhere in your app without disrupting the user experience.
Alerts & notifications
Ensure your team and users stay informed with triggered Slack notifications or webhooks.
A holistic view of account sharing
Harness the power of BI-grade analytics to expose account sharing attacks and unravel fraud rings with precision.
Events Table
| Timestamp | Policy | Event | User | Location | Connection | Device | Lists | Signals |
|---|---|---|---|---|---|---|---|---|
| Sat, Aug 8 07:59:08 | Challenge Medium Abuse Score | 732496 | kevin.qfanjul@gmail.com | Spain33204, Gijón | Telefonica de Espana | 83.53.25.12 | Chrome on Windows 10 | Disposable email domains |
| Sat, Aug 8 07:59:08 | Deny Bad email | 471896 | oleg.kalinovskiy75@gmail.com | Ukraine29000, Khmelnytskyi | Kyivstar | 188.163.27.70 | Chrome on Windows 10 | Trusted user devices |
| Sat, Aug 8 07:59:08 | Deny [ScAuth] Attempted Login | 956616 | themba.ndlovu@gmail.com | South Africa8001, Cape Town | Starlink | 212.105.137.116 | Chrome on Windows 10 | Challenged IPs, Timezone Area Mismatch, Multiple Accounts Per Device |
| Sat, Aug 8 07:59:08 | Deny Password Reset Policy | 849676 | priya.sharma@gmail.com | India400001, Mumbai | Jio | 157.49.135.38 | Chrome on Windows 10 | Multiple Accounts Per Device |
| Sat, Aug 8 07:59:08 | Challenge Trusted Device Policy | 753516 | anton.volkov.2023@gmail.com | Russian Federation672000, Chita | Rostelecom | 95.189.74.74 | Chrome on Windows 10 | Disposable email domains, Multiple Accounts Per Device |
All the data you need to pinpoint account sharing
Every interaction is enriched with comprehensive device intelligence, risk scores, location data, and much more.
Risk Scores
Out of the box risk scores for account abuse, account takeover, and bot abuse.
Velocities
Compute personalized signals based on real-time metrics like counts, sums, averages, and more.
Device fingerprinting
Persistent device identifiers resilient to storage resets and resistant to privacy plug-ins.
Bot detection
Identify bot actions via bot scores, headless indicators, or velocity and rate limit checks.
Create your free account today
Start with a free quota, with transparent pricing that scales when you do.