# How to reliably identify a troll with suspected multiple user accounts?

**URL:** <https://meta.discourse.org/t/how-to-reliably-identify-a-troll-with-suspected-multiple-user-accounts/49163>\
**Category:** Product Support\
**Created:** [Août 24, 2016, 7:30 UTC](https://meta.discourse.org/t/how-to-reliably-identify-a-troll-with-suspected-multiple-user-accounts/49163 "2016-08-24T19:30:15Z")\
**Posts on this page:** 1\
**Showing post:** 1

<div class="post-metadata">

**Author:** ![ljpp](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/ljpp/32/96506_2.png) [@ljpp](https://meta.discourse.org/u/ljpp)\
**Post date:** [Août 24, 2016, 7:30 UTC](https://meta.discourse.org/t/how-to-reliably-identify-a-troll-with-suspected-multiple-user-accounts/49163/1 "2016-08-24T19:30:15Z")

</div>

Surprise, surprise, our community has a troll.

Our troll is using a mobile connection, instead of a land line, and thus his IP-address is ever changing, constrained only by the operators IP pool. We have already suspended couple of his user accounts, and now I suspect he is back with a third. Unfortunately I don’t have rock solid technical proof that this is the same guy, even though he has similar agenda, writing style and IP-range of the previous accounts.

So if IP is useless, is there any other ways for me to investigate and identify that this new user is the very same we have suspended before, with a reasonable level of certainty?

Could/should Discourse cookie-tag registered users to improve chances of detecting dupe accounts? Cellular 4G broadbands are very popular nowadays, so old school IP-based method does not do the trick anymore.

---

_[View the full topic](https://meta.discourse.org/t/how-to-reliably-identify-a-troll-with-suspected-multiple-user-accounts/49163)._