Two accounts can have different email addresses and still belong to the same person. On a digital platform, such connections are examined through registration details, login history, and payment data.

The checks are often automatic. When the system finds several coinciding information, it can create a case for further review. The method is used, among other things, in online casinos, where each player should usually have one personal account.

What the casino examines upon registration

An online casino receives more information when a new account is created. Name, date of birth, email address and phone number can be included in the registration. Some information is later checked against identity documents. The Norwegian information page about Hitnspin describes, among other things, registration, deposits, withdrawals and available payment methods. Such account functions require the platform to link transactions to the correct user. A personal account makes it possible to collect balance, game history and payment information in one place.

Suppose someone first registers an account with a private email address. Later, the person tries to create a new account with their work address, but uses the same phone number. The system can then find the connection already during registration.

However, a similar phone number does not automatically mean that the accounts have the same owner. Phone numbers can change owners, and incorrect registrations occur. Therefore, such matches must be considered together with other information.

How much does an IP address tell?

The IP address provides information about the network connection used when logging in. Several people in the same home can share one public IP address through the router.

A hotel connection can bring many guests together behind the same address. Mobile operators can also allow multiple subscribers to share public IP addresses.

IP addresses are therefore most useful when the system examines the time and other details of the login. Two accounts with the same IP address do not have to belong to the same person.

The browser also sends technical information that can be included in the control. Several data types can be examined together:

  • Registration Data. Coincidences in name, date of birth, telephone number, or other information provided.
  • IP address. The network connection used for registration and later logins.
  • Device information. Browser type, operating system, and other technical characteristics.
  • Payment Information. Connections between payment methods used on different accounts.

A technical similarity must be interpreted based on the context. Two people can have identical phone models and the same browser version.

More precise information can provide a basis for further verification. The platform can then investigate whether the accounts are actually linked to the same registered person.

When the payment history gives a clearer answer

Payment details may reveal connections that the registration form does not show. This is especially true when the same payment instrument is used on multiple accounts.

For example, a player can register two different email addresses and attempt to use the same payment card. If the platform registers a common card token, this can trigger a check.

A card token is a technical representation of card details. It allows payment systems to handle specific transaction data without using the entire card number at each control step.

Such a link must be considered within the platform’s own rules and privacy practices. Payment methods can also have multiple authorized users.

In the case of a withdrawal, the casino may ask for documentation that links the account to the right person. This makes the check more precise than an assessment based only on device data.

Why fake accounts get extra attention

Identity verification is also about ensuring that the account details belong to the right person. An account can contain correct contact information even if the registration was not completed by the owner.

In 2025, NorSIS published a report on identity theft and fake accounts. The survey was conducted by Opinion with 2011 Norwegian respondents.

According to the report, about 16 percent had experienced account takeovers on social media or fake accounts created in their name. The figures refer to the population’s experiences with digital identity, not duplicate accounts in online casinos.

This explains why a platform can examine identity details even after a successful registration. Checking personal data helps to link the right user to the right account.

What happens when the system finds a possible duplicate?

When multiple account details coincide, the system can mark the accounts for verification. Customer service can then ask for identity documents or confirmation of which account to use.

Access to the original email address makes it easier to verify your account history. Gjensidige provides more advice on secure login and privacy in our article How to stay safer online.

In the event of a forgotten password, the user should use account recovery. This will preserve the history and connection to previous transactions.

When multiple people use the same network

Two people in the same home can have their own accounts and share one public IP address. This provides natural technical similarities between the registrations.

Identity documents and personal account details can clarify who the accounts belong to. The platform, therefore, considers multiple data sources before determining whether the accounts have the same owner.