FRAUDSTERS HUNT 'CLEAN' PROXIES AS DETECTION EVOLVES

Residential proxies—internet traffic routed through real home devices—once provided a straightforward way for fraudsters to mask illegal activity. Today, that advantage is eroding. According to security firm Flare, criminals are adapting by hunting for residential proxies with minimal fraud histories, then layering them with additional identity deception tactics. These include browser fingerprinting, device profile spoofing, and other signals designed to mimic legitimate users. The shift reflects how fraud detection has matured. Payment processors and platforms now flag suspicious proxy usage patterns and correlate multiple identity signals. A single spoofed element no longer suffices. Instead, attackers pursue a holistic approach: combining squeaky-clean proxy infrastructure with fabricated device characteristics and browsing behaviors. The strategy aims to present a coherent, legitimate-looking profile that passes detection algorithms. This arms race demonstrates the cat-and-mouse dynamic in cybersecurity. As defenses strengthen, so too do attack sophistication and cost, potentially pushing fraud operations toward higher-value targets to justify increased overhead.