Account Attribution
Definition
The process of linking a pseudonymous or anonymous online account to a real-world identity. Methods include IP log analysis, device fingerprinting, cross-platform username correlation, metadata analysis of uploaded images, and platform-disclosed registration data.
- Goal
- Link a pseudonymous account to a real identity
- Methods
- IP log analysis, device fingerprinting, username correlation
- Additional method
- Uploaded-image metadata, platform-disclosed data
- Field
- Digital and OSINT investigation
Common questions
Why is cross-platform username correlation useful?+
People frequently reuse usernames, avatars, or writing style across platforms, letting investigators link accounts even when direct identifying data is absent on one of them.
What legal step is usually needed for platform-disclosed data?+
A subpoena, court order, or mutual legal assistance request is typically required to compel a platform to disclose registration or IP data tied to an account.
Is device fingerprinting reliable enough on its own?+
It narrows the pool of possible devices but is rarely conclusive by itself, since a fingerprint can be shared across users on the same device, so it is normally combined with other evidence.
Related terms
- Preservation Request
- A formal letter sent to a platform asking it to freeze and retain specified account data pending formal legal process. Under 18...
- Forensic Capture
- Tool-based documentation of online content that records the URL, timestamp, and page hash alongside the visible content. Preferred over manual screenshots in...
- MLAT (Mutual Legal Assistance Treaty)
- A mutual legal assistance treaty provides a framework for participating states to request specified assistance in criminal matters. Requests depend on treaty...
- NCII
- Non-consensual intimate imagery, including relevant real or synthetic depictions. Legal definitions and remedies vary.
- OSINT (Open-Source Intelligence)
- Open-source intelligence is information collected and evaluated from publicly accessible sources for a defined enquiry. Public availability does not guarantee accuracy, lawful...
- Platform Policy
- A service’s rules for participation and moderation. Breaching them is not automatically a criminal offence.
- Relationship-Investment Fraud
- Fraud that builds trust before inducing payments into a purported investment. Not every romance scam uses an investment pretext.
- Sock Puppet
- A fictitious online identity created and controlled by an investigator to observe or interact with a target without revealing the investigation. The...
- Stored Communications Act (SCA)
- Part of the US Electronic Communications Privacy Act (18 U.S.C. 2701-2712) that governs government access to stored electronic communications and data. It...
Explained in these topics
- Online Account and Social Media Investigation
- Social Media Crime: Cyberbullying, Grooming and StalkingThe assessment linking an account or activity to a person, using corroborated sources and considering shared access or compromise.