What is account farming in iGaming?
Account farming in iGaming is creating player accounts in bulk, usually with scripts and throwaway details, to claim sign-up offers, to sell the accounts on, or to keep them "aged" for later use. It is bonus abuse run as a production line rather than by one player at a keyboard.
Last updated
What a farm looks like
A farm needs three cheap, replaceable inputs for every account:
- An email address that can receive one confirmation link: a temp-mail inbox, a freshly registered domain with a catch-all, or alias spellings of a few real inboxes.
- An IP address that doesn't repeat: proxies, VPN exits or cloud servers that can be swapped per account.
- Something to fill in the form: a headless browser, an automation framework, or a plain HTTP script that posts the form directly.
Farmed accounts are then used to claim no-deposit offers, inflate referral or affiliate counts, or are sold to people who need an account they couldn't open themselves.
Signs in your sign-up data
- Bursts of registrations at odd hours, with names and addresses that look generated, such as
[email protected]. - Many new accounts that confirm their email and then never deposit.
- Registrations from hosting networks rather than home or mobile connections.
- Forms submitted faster than a person could type them, or without the page's scripts running at all.
How InlineShield breaks the production line
Farming only pays when each account is cheap, so InlineShield raises the cost of each input at the moment of sign-up. It flags headless browsers, automation frameworks and scripted HTTP clients; blocks disposable addresses by default, including unlisted ones found through their mail servers; recognises random, machine-made addresses; and holds sign-ups from datacenter IPs and VPNs by default. When the browser script didn't run at all, the answer's reasons say so, and you can switch on a hold for those sign-ups (trigger NO_BROWSER_CHECK). Smart email alerts tell you when an attack spike starts. See bot sign-up detection and the iGaming overview.
Frequently asked questions
Isn't a CAPTCHA enough?
It slows down crude bots, but farms use solving services and real browsers. See fake sign-ups despite CAPTCHA.
Do farmed accounts always use temp mail?
No. Careful farms use real webmail inboxes or their own domains. That is why the IP, the browser and the shape of the address count too.
Can I check one address from a burst?
Yes: the free disposable email checker shows whether it is a throwaway and whether it looks machine-made.
Screen your next sign-up for free
The Free plan includes 1,000 screenings a month. Create an account, add your keys and see real verdicts on your own traffic. No card, no sales call, no setup fee.