Digital Disguises · Vol. 4
Hey Digital Detectives,
Vol. 3 covered how to build the persona: a name, a photo, an email, a number. This volume is about making it look like it has been around.
A brand new profile with no history is the easiest thing for a platform to question. The fix is time, and most of it is waiting.
This builds on
Vol. 1 (virtual machines),
Vol. 2 (Sock Puppets 101) and
Vol. 3 (Building the Persona).
This series covers persona-building for passive, observational research. Know your authorization before you build anything. Laws vary by state and country, and this is not legal advice. Most platforms prohibit fake accounts in their terms of service, and that is a risk you take on knowingly.
1. Email
Two weeks minimum
→
2. First platform
A photo and a few details
→
3. The rest
Wait 1 to 2 more weeks, then sign in through it
Start with the email
Everything else hangs off the email, so it gets the most time. I give a new email two weeks minimum before I touch it.
Here is what I do with those two weeks. I sign up for the kind of newsletters you never read and always seem to end up with anyway. The spam, the promos, the "we miss you" emails. Let the junk pile in. I stay logged in instead of closing out after every session, and I do regular web browsing in that same browser while the account is open. The goal is an inbox with activity in it and an account that shows normal use.
All of it happens inside the VM. I personally always do this on my VM, never on my host computer. If you use a VPN, stay consistent with the location the whole time.
The two-week cook
What the account does
Days 1 to 3
Sign up for the newsletters nobody reads. Log in, browse a little, stay logged in.
Days 4 to 7
Let the inbox fill. Keep browsing normally in the same session.
Days 8 to 14
Same routine. Nothing new, nothing rushed.
Day 15 and after
Ready for its first real use.
Pick one platform and build it first
The major social platforms are the hardest accounts to get, so I do not try to start several at once. I pick one and put the most patience there. Hint: maybe start with the one that many platforms still accept as a sign in.
Once that account has some age on it, it becomes the anchor for everything else.
What aging actually looks like
Aging is a loose word for behaving like a normal user.
• Add a profile photo. AI generated and matched to the persona, same as
Vol. 3.
• Fill in a few details. Keep them consistent with the backstory from
Vol. 3.
• Look around. Scroll, browse, see what the platform shows you.
• Like a thing or two.
Ordinary is the goal.
Keep the activity minimal. Think about what you would do on your own personal profile and do about that much. No need to like 300 items.
How far you take this depends on the tier you picked in
Vol. 3. A Quick puppet does not need any of it. A Deep Cook puppet gets all of it and more time.
Verification prompts: sometimes a platform will ask you to verify with a phone number or a code. This is where that burner phone from
Vol. 3 comes in handy.
Be patient
Build at least one research account and have it on hand before you dive into an investigation.
Build them between cases, so one is already aged and ready when you need it.
Use the first account to open the rest
I usually wait another one to two weeks, minimum, before I use the first account to open anything else. That is just my preference.
After that, I sign in through it to other platforms instead of building each one from scratch. That is how I reach the newer platforms without facing a cold signup on each.
Platforms change what they offer for sign in. Check what is available when you get there before you plan around one option.
Keep every persona in its own box
One persona, one container. I never mix aliases. That means a separate VM, or at minimum a separate browser container. Separate logins, separate everything. If one persona goes bad, nothing else should go with it.
Persona A
Own email
Own accounts
Own container
Persona B
Own email
Own accounts
Own container
Persona C
Own email
Own accounts
Own container
What is a browser container?
A browser container walls off one identity's logins, cookies and site data from the others, inside the same browser. Firefox has a free add-on for it called Multi-Account Containers. Each persona gets its own container, so a login in one never touches another.
What is a VM?
A virtual machine is a separate computer running inside your real one. Whatever happens in it stays in it, away from your host computer's files, logins and history. Setup is covered in
Vol. 1.
Network habits: if you use a VPN, use the same one for that account every time, and keep the location consistent. Switching around adds inconsistency.
Summary
• Cook the email first. Two weeks minimum.
• Junk newsletters, stay logged in, browse normally, all inside the VM.
• Build one platform first and give it the most patience.
• Wait another 1 to 2 weeks before using it to open other accounts.
• Expect verification prompts. Keep that burner handy.
• One persona per container, always.
• Have a research account ready before you start an investigation.
That wraps up the Digital Disguises series.
The full series:
Vol. 1 (virtual machines),
Vol. 2 (Sock Puppets 101),
Vol. 3 (Building the Persona), and this one.
New to the site?
Start Here is the best place to begin. Want the next article in your inbox?
Subscribe.
How long do you let your first account cook before you use it? Drop it below. I want to know what is working for you.