Promotion Abuse

Promotions are valuable marketing tools, but they are highly susceptible to abuse. Because they are often one-off and unique, there is generally no historical data from which to create training data or labels. This means supervised machine learning models are ineffective, forcing companies to rely on simple rules and manually monitoring the promotion. DataVisor’s Unsupervised Machine Learning Engine is uniquely capable of detecting large-scale, coordinated promotion abuse because it analyzes all accounts and events at once. This allows it to uncover the hidden connections between accounts without training data or labels, and detect entire attack rings even if each member of the ring doesn’t look suspicious in isolation.

Request Trial

How Attackers Abuse Promotions Without Being Detected

IP Obfuscation

Proxies, VPNs, and cloud-hosting services allow attackers to evade IP or location blacklists and digital-fingerprint solutions.

Location Spoofing

Cybercriminals use software to fake their GPS location and take advantage of location-specific promotions.

Device Obfuscation

Fraudsters utilize mobile device flashing, virtual machines and scripts to appear as though they are using different devices.

Multi-Account Tactics

Sophisticated attackers evade detection by accruing promotional credits or currency on one account and cashing out on another.

How UML Fights Promotion Abuse

DataVisor’s Unsupervised Machine Learning Engine is uniquely effective at detecting promotion abuse because it analyzes the hidden connections between all events and accounts in real time. This allows it to detect entire rings of attackers without training data or labels, even if each ring member doesn’t look suspicious in isolation. In addition, because these hidden connections are often detected at account creation, DataVisor can stop the attackers before they strike.

No Labels or Training Data

Detect new and continually evolving attacks faster, without waiting for training data or labels.

Accuracy and Coverage

Analyze hidden connections between accounts to detect more attacks while lowering false positives.

Early Detection

Detect malicious accounts at account registration, before they can abuse promotions.

Learn How DataVisor Stops Promotion Abuse


Learn how DataVisor Stopped Promotion Abuse at at Top Social App

download case study


Learn about the attack patterns of attackers and how to identify them

Download Report


Learn How DataVisor Uses UML to Protect Social Commerce Properties

Download Datasheet

The DataVisor Detection Solution

Unsupervised Machine Learning Engine

Predict new, unknown threats without labels or training data by analyzing hundreds of millions of accounts and events simultaneously using the industry’s most advanced unsupervised learning technology.

Supervised Machine Learning Engine

Use industry leading supervised machine learning algorithms to augment the unsupervised machine learning detection with client-provided labels.

Automated Rules Engine

Generate and deprecate rules automatically, lowering maintenance costs and improving results explainability.

DataVisor Global Intelligence Network

Aggregate and analyze the industry’s broadest array of digital fingerprints and signals from billions of users across a variety of industries.

Account linkage view to discover hidden links among malicious accounts

Learn More

What’s Happening in Promotion Abuse


The Underground Market for User Accounts | Fake Accounts, Promo Abuse

User accounts are extremely valuable – real accounts far more so than fake accounts. This is not only true for Internet properties, which are valued by the size and growth of their user base, but also for professional online criminals who can exploit them for an ever growing list of attacks – spam, promotion abuse, fake reviews, and more.

Read Blog


Infographic: The Online Fraudster’s Tool Shed

DataVisor releases a new infographic highlighting the tools fraudsters use to build their armies of attackers. From their email addresses to their use of cloud services, we know what they are doing when they are DIY-ing an attack.

Read Blog

Read DataVisor’s Latest Posts

Go To The Blog

Getting Started

Want to get started and find out how DataVisor can help find malicious accounts hiding inside your social platform? Request a security assessment today!

Request Trial