A University of Cambridge analysis reveals how cheap SMS text message verification to create online accounts fuels global influence and manipulation campaigns
Analysis reveals how cheap text message verification fuels global influence and manipulation campaigns
Context & Ripple Effects
The Cambridge analysis connects account-creation infrastructure to an established abuse pattern: SMS has already been used to deliver election disinformation, including misleading texts sent to US voters, while engagement-trading services showed how accounts can be organized to game platform signals.
It also broadens concerns around SMS beyond login security. Reporting on a low-cost SMS rerouting attack used to compromise accounts and on large volumes of 2FA traffic passing through a small intermediary illustrates how a communications layer built for convenience can become an operational dependency.
First-order effects
- Cheap SMS verification lowers the cost and friction of assembling accounts at scale, making it easier for influence operators to establish seemingly distinct online identities.
- Platforms that treat a verified phone number as a meaningful anti-abuse signal face a more explicit mismatch between verification and account authenticity.
Second-order effects
- Trust-and-safety teams will have to weigh tighter checks on SMS-verified sign-ups against the access costs those checks can impose on legitimate users, particularly where SMS is the default onboarding tool.
- The finding links account creation to downstream manipulation: once accounts exist, coordinated engagement can amplify content and distort platform feedback mechanisms, as earlier Instagram engagement-trading activity demonstrated.
Third-order effects
- If phone-number verification remains inexpensive and readily obtainable, platforms’ identity systems may shift from a single verification signal toward layered, behavior-based assessments of coordinated activity.
- The pattern strengthens the case for examining the intermediaries and verification markets behind online accounts, rather than treating influence operations solely as a content-moderation problem.
The trend: This is part of a broader shift from policing individual harmful posts toward securing the low-cost infrastructure that enables coordinated online influence at scale.