Ban evasion is an attempt by an individual to circumvent disciplinary restrictions placed on an online account. Someone attempting to do this may create a new account with similar ID credentials, use a previously-created account to continue the purpose of the banned account, or take over someone else’s account.

‍

The outcome of ban evasion is that users who were restricted or deactivated on a platform for violating its policies can return and continue their abusive behavior. This can result in an unsafe platform where customers can repeatedly face harassment, spam, cheating (in games), and even fraudulent activity or account takeovers.

‍

‍

Why Does Ban Evasion Occur? 

There are generally two reasons why someone would want to evade a ban on their online account. On one hand, they may believe their activities did not warrant disciplinary action against their account, and so the ban is unjust. Many websites have appeal processes allowing users to challenge a ban legitimately.

‍

On the other hand, they may know full well that the activity that got their account banned was not allowed. They may attempt to evade a ban as a challenge, or because they consider abusive behavior fun and want to continue it. 

‍

They may also wish to continue abusive behavior as it was giving them some sort of material benefit, like allowing them to cheat at an online game or to defraud customers on eCommerce sites.

‍

‍

Is Ban Evasion Illegal?

In most cases, ban evasion isn’t a criminal offense. It is, however, a violation of the terms of use for the online platform that issued the ban. Depending on the jurisdiction and the egregiousness of the activity that resulted in the ban, the platform may bring a civil lawsuit against a ban evader.

‍

In rare cases, civil charges for ban evasion can be upgraded to criminal ones. This may happen if it’s determined that the purpose of evading the ban was to commit acts classified as criminal, such as by the Computer Fraud and Abuse Act. 

‍

It criminalizes exceeding authorized access to a computer (i.e. ban evasion) for the purposes of stealing or revealing private information, or of conducting fraudulent activities that result in material gain.

‍

Banned users typically attempt to evade bans in one of three ways:

‍

1. Create a new account or profile with different credentials.
2. Repurpose an existing account or profile they own to serve the same purpose as the banned account.
3. Use another user’s account as if it was their own. The account owner may voluntarily allow this, or the banned user may forcibly take over the account.  

‍

Some platforms may use ID credentials such as email addresses, browser cookies, IP addresses, and unique device signatures to detect and block a banned user’s attempts to create or repurpose accounts. Many platforms also consider an active user allowing a banned user to utilize or appear on their account to be ban evasion as well.

‍

Here’s how several popular online platforms handle banning and ban evasion.

‍

‍

Twitch Ban Evasion 

Twitch is an interactive live video streaming platform. It is mostly used for broadcasting video game playthroughs or tournaments. However, it also features broadcasts of music, sports, creative processes, and other forms of entertainment.

‍

Users on Twitch can be banned for:

• Displaying or glorifying self-destructive behavior
• Enacting, threatening, or encouraging violence against others
• Sharing another user’s private information without their consent
• Harassing other users, including posting hateful content about them
• Posting content that is excessively violent or sexual in nature
• Posting links or referral codes to gambling-related websites
• Attempting to impersonate another person or organization
• Engaging in spam, phishing, fraud, cheating, or other malicious conduct
• Persistently sharing widely-disproven and harmful misinformation

‍

A Twitch user may attempt to evade a ban by creating a new account to avoid a previous account’s suspension. They may also get another user to host them on that user’s channel or replay their content; these actions may or may not involve an account takeover.

‍

‍

Reddit Ban Evasion 

Reddit is a social network where users share news stories, questions, discussion topics, and other content on broad topic forums called “subreddits.” Other users are then allowed to respond to content and other messages about that content, as well as vote on whether a piece of content or a message is positive or negative.

‍

Improper conduct by a user will usually result in them being banned from the subreddit on which the conduct happened, but not necessarily the entire website. However, further improper conduct – including ban evasion – may result in a user being permanently banned from all of Reddit.

‍

Banworthy conduct on Reddit includes:

‍

• Harassing, bullying, or threatening violence against other users
• Spamming, manipulating votes, or artificially increasing subscriber counts
• Posting (or threatening to post) others’ personal information or media without consent
• Posting or encouraging sexual or suggestive content involving minors
• Deceptively impersonating an individual or entity
• Improperly labeling graphic, sexually explicit, or potentially offensive content
• Posting content that depicts, solicits, or facilitates illegal activities
• Interfering with the normal operation and use of the website

‍

A Reddit user may attempt to circumvent a ban by using an alternate account to continue participating in a subreddit they were banned from. 

‍

Creating or repurposing a subreddit to continue the objectives of one that was shut down for persistent banworthy behavior is also considered ban evasion on Reddit.

‍

So how does Reddit detect ban evasion? Reddit has a tool called AutoModerator – along with similar community-generated tools – that can be configured to detect and block content and users that violate Reddit’s rules. 

‍

Subreddit moderators can also report ban evasion on Reddit to site administrators. Attempting to reconstitute a banned subreddit by creating a new one or repurposing an existing one is a ban evasion offense that is handled directly by Reddit’s administrators, and does not require a moderator report.

‍

‍

Discord Ban Evasion

Discord is a voice, video, and text chat application. It comprises mainly private, invite-only groups of friends, families, and communities. However, it also features a diverse set of open communities where anyone can discuss particular topics – mainly video games.

‍

The moderator of a Discord server, or Discord administrators, may ban a user for:

‍

• Promoting, organizing, or participating in harassment or hateful conduct
• Threatening or promoting violence, including posting excessively violent content
• Sharing (or threatening to share) others’ personal information without consent
• Posting content that sexualizes minors in any way
• Allowing users under 18 years of age to access adult content
• Posting content that promotes self-destructive behavior
• Posting content that violates intellectual property rights
• Posting misinformation, including making false reports to Discord’s support teams
• Maliciously impersonating an individual or organization
• Engaging in activities meant to hijack or damage another user’s account or computer
• Organizing, promoting, engaging in, or providing the means for illegal activities
• Using fake accounts to disrupt communities or artificially increase their membership
• Buying/selling a Discord account/server, or providing fake incentives to promote a server

‍

To get around a ban, a Discord user may attempt to create a new account or repurpose an existing account. However, Discord can detect and block accounts controlled by banned users by tying their usernames to email and IP addresses.

‍

YouTube Ban Evasion

YouTube is a video-sharing website where people can watch videos uploaded by others, as well as upload and share their own videos. Users can also like/dislike, comment on, and share links to the videos they watch.

‍

Users of YouTube can be banned for:

‍

• Posting repetitive videos that lead viewers off the site, especially for malware or phishing
• Misusing metadata to present a video or playlist’s content as something it isn’t
• Posting content offering ways to “get rich quick” or cheat YouTube engagement metrics
• Repeatedly posting similar comments, especially to phish or harass other users
• Live streaming content for which they don’t own the intellectual property rights
• Copying another user’s profile or content to falsely make it look as if it is theirs
• Posting content intended for sexual gratification, including language/narratives/sounds
• Posting content meant to sexualize, endanger, distress, or inappropriately target minors
• Posting content that depicts (without sufficient context), promotes, or teaches self-harm
• Posting content that features excessive use of profane language
• Posting content that promotes or encourages dangerous or illegal activities
• Posting content that encourages violence or hatred, or depicts violence for shock value
• Posting content intended to sell regulated or illegal goods
• Posting misinformation that could result in personal harm or interference with democracy

‍

Users banned from YouTube may appeal their channel or account suspensions if they feel these were unjustified. They may also try creating another channel or account with different credentials but a similar purpose, or repurposing an existing channel to replace a banned one. If they are caught attempting the latter methods of ban evasion on YouTube, however, they may be permanently banned.

‍

‍

Twitter Ban Evasion

Twitter is a social networking website where people can send messages, images, or videos in 280-character-long posts called “tweets.” These posts can either be shared publicly or privately sent to other users. Users also have the ability to “like” posts or to “retweet” them (i.e. repost them on their own account).

‍

Twitter may ban a user for:

‍

• Threatening or glorifying violence, including terrorism or other violent extremism
• Engaging in or inciting targeted harassment against individuals or identity groups
• Promoting self-harm, or encouraging another user to harm themselves
• Posting content that is sexually explicit or excessively gory
• Buying or selling regulated goods or services, or facilitating illegal services
• Engaging in or incentivizing non-consensual exposure of private information or media
• Using credentials to log into another user’s account, modify the information on it, etc.
• Artificially amplifying or suppressing information to disrupt other users’ experiences
• Impersonating an individual or group, or otherwise using a fake identity, to deceive others
• Sharing false or manipulated information to cause harm or disrupt civic processes
• Sharing content that violates copyright or trademark rights

‍

If a Twitter user is banned, they may attempt to evade the ban by creating a new account or repurposing an already-existing account that they control. They may also operate another user’s account, either with the account owner’s permission or by forcibly taking over the account. 

‍

Twitter considers these actions as ban evasion if they are intended to replace suspended accounts. This includes representing a banned user’s identity, persona, or brand, even if the account has a different purpose than the banned account it’s based on. There are some exceptions, however, for parody, commentary, and fan accounts.

‍

Instructions for how to report ban evasion on Twitter can be found here.

‍

‍

Mitigating ban evasion is an important part of an online platform’s Trust and Safety program. It prevents bad actors from returning to the platform to continue abusive behavior, which may include stealing information from – or even defrauding – other users. 

‍

The ability to keep these people permanently off the platform helps to assure good-faith users that their money, ID credentials, and personal dignity will be protected while using the platform.

‍

Don’t let ban evaders ruin the trust customers have in your platform. See how Unit21’s Marketplace Fraud solution can keep your platform secure.