Antidetect Browsers Let Fraudsters Run Thousands of Fake Accounts Without Being Spotted
Antidetect browsers hide a user's digital identity, allowing one person or a small team to run thousands of separate accounts across platforms such as Facebook, Instagram, TikTok, YouTube, X, Discord, LinkedIn and Reddit without triggering platform detection. Check Point Research highlights three tools: Kameleo, AdsPower and MultiLogin. It chose them because underground forums and criminal marketplaces regularly refer to them, which suggests use well beyond their stated commercial purposes.
The report cites Anthropic's September 2026 Threat Intelligence Report, which documented a fraud campaign aimed at cryptocurrency exchanges and financial marketplaces. Attackers combined antidetect browser profiles, residential proxies, automated CAPTCHA solving and identity-verification bypass tools to create many verified accounts while avoiding onboarding checks. Because these accounts pass KYC verification, build normal-looking activity histories and appear benign during transactions, fraud systems that rely on user behaviour or device identity often cannot flag them until fraud has already happened.
The tools are legal, registered products with legitimate uses in digital marketing, e-commerce and privacy protection. However, the same infrastructure can support Coordinated Inauthentic Behavior, meaning organised manipulation campaigns built on false identities. Meta's latest transparency reporting flagged this as a growing concern, naming Russia, Iran and China as the three leading sources of such activity globally.