Learn

284 articlesCategory: All
Behavioral correlation

What is account correlation?

Creating an anonymous account alone is not enough to protect anonymity.

Username. Icon. Profile. Email address. Phone number. Login state. Follow relationships. Post content.

When this information overlaps with a real-name account or a past account, separate accounts can be seen as belonging to the same person.

This is account correlation.

Accounts connect through more than names

Account correlation means that multiple accounts become connected to the same person or the same organization.

Even if you do not write your real name, accounts can connect through many clues.

ClueExampleWhat happens
UsernameSame ID, similar IDConnects with a past account through search
IconSame image, same characterConnects through image search or memory
ProfileSame hobbies, job, regionOverlaps with the real-name side
Email addressReuse of a real-name emailConnects with personal information
Phone numberRegistration with the same numberBecomes a strong identifier
Follow relationshipsSame friends or same communitiesInferred from relationships

For an anonymous account, changing only its appearance is not enough. The registration information and behavior patterns behind it also need to be separated.

Reusing usernames is dangerous

Usernames are easy to search.

Using an old handle with only a small change. Including the same word as a real-name account. Including numbers or a birthday you often use. Using the same ID across multiple services.

These can connect the account with past information.

A username for anonymity needs to be considered separately from the real-name side and past accounts. If you choose only by memorability, the name moves closer to your past self.

Icons and images also connect

Icons are surprisingly strong clues.

Same photo. Same illustration. Same composition. Same edits. Same generated AI image.

Even if the image itself is not the same, using a similar feel or the same source material may be noticed by people who know you.

Past accounts may also be found through image search. Reusing the same icon should be avoided.

For an anonymous icon, separate the source material, style, and theme from the real-name side.

Registration information is not visible on the surface

One serious part of account correlation is information that is not displayed in the profile.

Email address. Phone number. Recovery email. Login device. Login IP. Advertising ID. Payment information.

Other users cannot see these. However, the service side uses them for identification.

InformationWho can see itPoint to watch
Email addressService operatorDo not use the same one as the real-name side
Phone numberService operatorBecomes strong identity-verification information
Recovery emailService operatorConnects with the real-name environment
Login deviceService operatorUse from the same device is visible
Payment informationService operator, payment providerConnects with personal information

For anonymity, check not only the profile visible to other people, but also the registration information given to the service.

Follow relationships and interactions are visible

An account does not exist by itself.

Who you follow. Who you reply to. Whose posts you react to. Which communities you are in.

These relationships also become clues.

If a real-name account and an anonymous account follow the same people, they start to look as if they belong to the same person. Reacting only to the same friends also stands out.

If you want to preserve anonymity, you also need to be careful about bringing in relationships.

Interaction habits also become clues for correlation.

Always reacting quickly to posts from the same person. Joining inside jokes from the same communities as the real-name side. Reacting to the same topic in the same time period.

These behaviors surface more naturally than profile information. Even if you create a new account, bringing in relationships and reaction patterns makes it harder to be seen as a different person.

BehaviorWhat can be seen
Following the same peopleFriend relationships or communities
Reacting to the same postsInterests or people being watched
Same inside jokesPast affiliation or relationships
Replies in the same time periodLife rhythm or active hours

Login state breaks anonymity

Even if you use a communication route for anonymous activity, logging in to a real-name account greatly weakens anonymity.

For example, even if you use Browser or a , if you log in to a real-name social network, email, cloud service, or shopping site, that behavior becomes connected to the account.

Even if the source IP changes, the act of logging in to the real-name account itself connects the behavior to the real-name side.

In anonymous activity, it is important not to mix real-name accounts and anonymous accounts in the same browser, on the same device, or during the same time period.

Things to check

Before creating an anonymous account, check the following points.

  • Whether the username is similar to past accounts
  • Whether icons or images are being reused
  • Whether the profile shows hobbies or regions from the real-name side
  • Whether the registration email or phone number is separate from the real-name side
  • Whether the recovery email connects to the real-name environment
  • Whether follow relationships overlap too much with the real-name side
  • Whether you are logged in to a real-name account in the same browser

Account correlation happens not only when an account is created, but also during operation. Even if things are separate at first, habits from the real-name side mix in over time.

Some correlation is visible to the service

There is information that the service side can see even if other users cannot.

If you use the same device, same browser, same connection, same phone number, same payment method, or same recovery email, it becomes easier for the service side to link the accounts.

When you need stronger anonymity, separate not only the visible profile, but also the registration and login environments. How far you should separate them depends on the threat model, but thinking "it is not a problem because other people cannot see it" is dangerous.

It can break down after creation

An anonymous account can break down during operation even if it was separated at creation.

Even if you initially use a different name, different email, and different profile, your usual interests and relationships mix in over time. Talking on the anonymous side about topics discussed on the real-name side. Reacting only to friends from the real-name side. Using another cut of the same photo.

Overlap that appears over timeExample
Topic overlapReacting to the same issue from the same angle as the real-name side
Relationship overlapContinuing to follow the same people
Image overlapThe same places or belongings appear repeatedly
Time overlapPosting during the same active hours as the real-name side
Writing-style overlapBecoming accustomed and returning to the original way of writing

Account correlation happens through continued behavior, not just through settings at creation. Regularly check for overlap with the real-name side.

Decide the purpose of separation

Not everyone needs to completely separate every account.

The required strength of separation differs for hobbies, work, family, anonymous consultation, and whistleblowing. However, for accounts that need anonymity, it is necessary to consciously reduce overlap with the real-name side.

If you increase accounts without deciding their purpose, you no longer know how far each one should be separated. First decide "what you want to hide from whom," then design the name, registration information, usage environment, and interaction range.

Summary

Account correlation means that multiple accounts become connected to the same person or the same organization.

Usernames, icons, profiles, email addresses, phone numbers, follow relationships, and login state become clues.

Creating an anonymous account alone is not enough. Registration information, usage environment, relationships, and post content also need to be separated.

For anonymity, it is important to see an account not as a "name," but as a "bundle of identifiers."

Related tools

OSINT directory

OSINT Framework

An external resource related to this article. Open it only when it fits your situation and threat model.

Why it is listed: It can help with the article topic, but it is outside Anonymity Sense and should be checked before use.

URL : https://osintframework.com/

Open external site
Reverse image search

Google Lens

An external resource related to this article. Open it only when it fits your situation and threat model.

Why it is listed: It can help with the article topic, but it is outside Anonymity Sense and should be checked before use.

URL : https://lens.google/

Open external site
Face search

PimEyes

An external resource related to this article. Open it only when it fits your situation and threat model.

Why it is listed: It can help with the article topic, but it is outside Anonymity Sense and should be checked before use.

URL : https://pimeyes.com/

Open external site
Metadata inspection

ExifTool

An external resource related to this article. Open it only when it fits your situation and threat model.

Why it is listed: It can help with the article topic, but it is outside Anonymity Sense and should be checked before use.

URL : https://exiftool.org/

Open external site

Related articles