Risk & Compliance
Duplicate IPs
Monitoring multiple accounts from the same IP address
Duplicate IPs
The Duplicate IPs tab shows IP addresses that have multiple accounts associated with them — a potential indicator of one person running multiple accounts or account sharing.
What You're Seeing
Each row shows:
- IP Address — the shared IP
- Account Count — how many accounts use this IP
- Associated Emails — list of email addresses
Why This Matters
Not Always Fraud
Same IP doesn't automatically mean fraud. Investigate before acting.
Legitimate explanations:
| Situation | Why Same IP |
|---|---|
| VPN users | Many people use same VPN exit node |
| Shared household | Family members trading separately |
| Office/coworking | Colleagues with separate accounts |
| University/dorm | Students on campus network |
| Mobile carriers | Carrier-grade NAT shares IPs |
Investigation Steps
Check the Count
- 2 accounts — could be coincidence, household, or suspicious
- 3-5 accounts — worth investigating
- 10+ accounts — almost certainly something to address
Review the Emails
Look for patterns:
- Similar naming conventions? (john.smith1@, john.smith2@)
- Same domain? (all @gmail vs. mix of providers)
- Obviously fake? ([email protected])
Check Each Account
Unfortunately, you can't click directly from IP to account. You need to:
- Note the email addresses
- Search for each one individually
- Review their accounts
Compare Accounts
If suspicious, use the Compare Tool:
- Are they copy trading?
- Are they hedging?
- Similar trading patterns?
Cross-Reference
Check if the IP appears across other detection tabs:
- Same accounts flagged for copy trading?
- Same accounts flagged for hedging?
Decision Framework
Likely Legitimate
- 2 accounts, different trading styles
- Household explanation (different names, ages)
- Different trading times (shift workers, time zones)
- No copy trading or hedging detected
Action: Note and monitor, no immediate action.
Suspicious
- 3+ accounts, similar emails
- Same trading patterns
- Copy trading or hedging detected
- Recently created accounts
Action: Investigate further. Contact accounts via support if needed.
Likely Fraud
- Many accounts (5+)
- Clear copy trading or hedging
- Fake-looking emails
- Coordinated trading behaviour
Action: Fail accounts, blacklist emails, document evidence.
Taking Action
Limitations
Proactive Monitoring
Daily Check
Quick scan of Duplicate IPs tab:
- Any new high-count IPs?
- Any IPs you've seen before with more accounts now?
Weekly Review
Deeper review:
- Cross-reference with Copy Trading and Hedging tabs
- Look for patterns across flagged accounts
- Check if previous warnings were heeded