Russians used US VPNs, matching stolen photo IDs and SSNs, fake PayPal accounts to prevent Facebook and Twitter from spotting illicit influence on 2016 election
Russell Brandom / The Verge :
Context & Ripple Effects
This report fills in the operational-security layer of a story that had been told mostly through its content. Earlier reporting showed what the campaign did — an investigation traced suspected Russian operators' fake accounts on Twitter and Facebook spreading anti-Clinton material — and later that they used Facebook's Custom Audiences retargeting tool to aim specific ads at specific voters. What this piece adds is how they stayed invisible while doing it.
The answer was to look American at every checkpoint a platform checks: US VPNs for IP addresses, stolen photo IDs and Social Security numbers for account verification, and fake PayPal accounts for payment. Each layer maps onto a real control point — login geography, KYC-style ID checks, ad billing — which is why the finding matters beyond 2016.
First-order effects
- Facebook and Twitter's account-verification systems are exposed as the failure point: identities built from stolen photo IDs and SSNs passed checks designed to catch obvious fakes, so both platforms face immediate pressure to harden signup and advertiser vetting.
- PayPal's role as the billing rail means the payment side of ad purchasing becomes part of the evidence chain, pulling financial firms into platform-integrity questions they had not been asked to police.
Second-order effects
- Platforms respond by tightening identity and payment verification, raising friction for legitimate advertisers too — the cost of the IRA-era takedowns, like Facebook removing Pages tied to a fake left-wing outlet after an FBI tip, lands partly on honest customers.
- Enforcement shifts from platform self-policing to government action, as seen when the DOJ and partners seized domains and 968 X accounts behind a Russian AI-enhanced bot farm — a template that treats disinformation infrastructure as seizable property.
Third-order effects
- If the pattern holds, influence operations industrialize around whatever defeats verification next: the same arc runs from hand-built fake accounts to an AI-assisted network of 160+ fake news sites, suggesting identity assurance — proving a person is real — becomes a durable product category rather than a one-off compliance fix.
- Structurally, election integrity moves from a content-moderation problem to an authentication problem spanning social platforms, payment processors, and registrars, with regulators increasingly willing to seize infrastructure instead of waiting for voluntary removals.
The trend: Influence operations are evolving from manually faked accounts toward AI-scaled networks, pushing platforms and governments alike toward identity verification and infrastructure seizures as the countermeasure.