The legal risks of running sock accounts range from a quiet platform ban to federal prison, and which end of that range you land on depends almost entirely on what the fake accounts are used for. A sock account by itself is not a crime. It becomes one when it’s used to defraud, harass, impersonate, or deceive consumers or voters. In between those extremes sit contract-based platform penalties, Federal Trade Commission fines, and private lawsuits from businesses that lose money because of the deception.
Platform Bans Come First
Every major platform prohibits sock accounts in its Terms of Service through real-name policies, single-account rules, or both. When you register and click “I agree,” you enter a binding contract that gives the platform broad authority to enforce those rules however it chooses. That contract is the legal foundation for everything that follows.
Automated detection systems look for clusters of accounts sharing IP addresses, device fingerprints, or behavioral patterns. Once a network is identified, the platform can suspend every linked account at once and revoke access to anything attached to them: purchased content, virtual currency, account balances. Courts have consistently held that once you agree to a platform’s terms, you’ve accepted the consequences of violating them, and the termination decision is generally final.
FTC Rules on Fake Reviews
The Federal Trade Commission’s Rule on the Use of Consumer Reviews and Testimonials took effect on October 21, 2024, and it directly targets the behavior sock accounts enable. The rule makes it illegal for businesses to create, purchase, or sell fake consumer reviews or testimonials. It also prohibits paying for reviews that must be positive. Even a coupon offer that says “tell us how much you loved your visit” can violate the rule because it implies the review needs to be favorable.
Liability falls on businesses, not individual consumers. Advertising agencies, public relations firms, review brokers, and reputation management companies can all face enforcement actions if they create or sell fake reviews. Individuals who are “in the business of selling or creating fake consumer reviews” are also covered. An ordinary consumer who posts a single fake review on their own is not liable under this specific rule.
The FTC can seek civil penalties for knowing violations. As of 2025, the per-violation penalty under the FTC Act’s trade regulation rule authority is $53,088, adjusted annually for inflation. For a business running a coordinated sock account campaign with hundreds of fake reviews, those penalties compound quickly.
Civil Lawsuits From Businesses You Harm
Beyond FTC enforcement, private parties can sue when sock accounts cost them money. The legal theory depends on what the accounts did.
False Advertising Under the Lanham Act
When a business uses sock accounts to post fake reviews promoting its own products, or to trash a competitor, the target business can sue under the Lanham Act. The relevant provision prohibits misrepresenting the qualities of goods or services in commercial advertising or promotion. Fake review campaigns fit squarely within this framework because they are commercial speech designed to influence purchasing decisions and distributed to the public through websites and social media.
Lanham Act claims are available only to competing businesses, not to individual consumers. For companies that can show a competitor orchestrated a fake review campaign, the statute offers injunctive relief and monetary damages.
The Computer Fraud and Abuse Act, With Limits
The CFAA makes it illegal to access a computer without authorization or to exceed authorized access and obtain information you weren’t entitled to see. It includes a civil cause of action, so private parties can sue, not just prosecutors. A plaintiff who suffers damage or loss can seek compensatory damages and injunctive relief, but the suit must be filed within two years.
The Supreme Court’s 2021 decision in Van Buren v. United States significantly narrowed the statute. The Court held that “exceeding authorized access” means accessing areas of a computer system that are off-limits to you, not simply using a system you’re allowed to access for a prohibited purpose. The Court explicitly rejected the argument that violating a website’s terms of service counts as a CFAA violation, noting that such an interpretation would turn “millions of otherwise law-abiding citizens” into criminals. Simply creating a sock account in violation of a single-account policy probably doesn’t trigger CFAA liability on its own. CFAA claims against sock operators are more likely to succeed when the accounts were used to scrape protected data, access restricted systems, or cause actual damage to computer infrastructure.
Commercial Disparagement
A campaign of fake negative reviews can support a claim for commercial disparagement or trade libel. The targeted business generally needs to show that the statements were false, that the person making them knew they were false or acted recklessly, and that the business suffered actual financial losses as a result. Courts can issue injunctions ordering the defendant to stop the campaign and take down the fake reviews. The Consumer Review Fairness Act protects genuine consumer reviews from retaliation, but it does not shield reviews that are “clearly false and misleading.”
When Sock Accounts Become Federal Crimes
A sock account is not itself a crime. The conduct it enables is what turns it criminal, and several federal statutes come into play.
Identity Theft
When someone creates a sock account using another person’s real name, photo, Social Security number, or driver’s license information, federal identity theft law applies. Under 18 U.S.C. § 1028, using another person’s identifying information without authority to commit or facilitate a federal crime carries a prison sentence of up to 5 years for basic offenses. If the stolen identity involves government-issued documents like birth certificates or driver’s licenses, or if the fraud yields $1,000 or more in value within a year, the maximum rises to 15 years. Repeat offenders and those connected to drug trafficking or violent crime face up to 20 years.
On top of that, 18 U.S.C. § 1028A adds a mandatory consecutive sentence of 2 years for aggravated identity theft when someone else’s identity is used during any of a long list of federal felonies. Those 2 years get tacked onto the underlying sentence, with no possibility of running concurrently.
Cyberstalking
Using multiple sock accounts to harass or intimidate someone can trigger federal cyberstalking charges under 18 U.S.C. § 2261A. The statute covers anyone who uses the internet or electronic communications to engage in a course of conduct that places another person in reasonable fear of serious bodily injury or causes substantial emotional distress. A “course of conduct” requires at least two acts showing a continuity of purpose, so a sock account network sending repeated threatening messages to the same target fits the definition.
Penalties under the cross-referenced sentencing provision at 18 U.S.C. § 2261(b) run up to 5 years in prison for the baseline offense. If the victim suffers serious bodily injury, the maximum rises to 10 years. If the stalking results in death, the sentence can be life imprisonment.
Wire Fraud
Wire fraud is the catch-all federal statute for online financial schemes. Under 18 U.S.C. § 1343, anyone who devises a scheme to defraud and transmits communications over the internet to carry it out faces up to 20 years in prison. If the fraud affects a financial institution, the maximum jumps to 30 years and a fine of up to $1,000,000. The statute is broad enough to cover fake review campaigns that drive sales through deception, impersonation schemes that redirect payments, and fake endorsements designed to pump a stock price. The elements are a fraudulent scheme, internet communications used to execute it, and intent to defraud.
Federal Conspiracy
When two or more people coordinate a sock account network for any illegal purpose, federal conspiracy charges under 18 U.S.C. § 371 become available. The statute applies when people agree to commit any federal offense or to defraud the United States, and at least one of them takes a concrete step toward carrying out the plan. The penalty is up to 5 years in prison. Prosecutors reach for conspiracy when they encounter organized operations like paid troll farms, coordinated disinformation networks, or commercial fake-review services, because it lets them charge the organizers and operators together.
Election and Foreign-Influence Exposure
Sock accounts used for political purposes carry a layer of legal risk most people don’t anticipate.
Campaign Finance Rules
When someone pays for a communication that is coordinated with a political campaign, the FEC treats that communication as an in-kind contribution subject to federal contribution limits and disclosure requirements. The test has three elements: payment, content referencing a candidate, and conduct coordinated with the campaign. A paid sock account operation that coordinates messaging with a campaign can satisfy all three, turning what looks like grassroots support into an unreported campaign contribution.
Any public communication made by a political committee, or placed for a fee on someone else’s platform, must carry a “paid for by” disclaimer identifying who financed it. Sock accounts that push political messaging without these disclaimers violate FEC disclosure rules. The disclaimer must be clear and conspicuous regardless of the medium.
Foreign Nationals and FARA
Foreign nationals are flatly prohibited from making contributions, expenditures, or disbursements in connection with any federal, state, or local election. Running a sock account network to influence an American election from abroad falls directly within this prohibition. It’s also illegal for any U.S. person to solicit or accept such contributions from foreign nationals.
Separately, the Foreign Agents Registration Act requires anyone acting as an agent of a foreign government or political entity to register with the Department of Justice and publicly disclose that relationship. Running sock accounts to spread political messaging on behalf of a foreign principal without registering is a criminal offense. Willful violations carry up to 5 years in prison and fines up to $250,000. Less serious disclosure failures, such as failing to properly label materials, carry up to 6 months and a $5,000 fine.