&gt; A) Tally up all the Account &lt;-&gt; IP relationships.<p>In my scenario, it would be two accounts with two IPs each.<p>That threshold is <i>way</i> below something truly actionable. I mean, could you imagine? A guy travels and uses hotel wi-fi, perhaps internationally. Now he has two IPs associated with his account, and so they block&#x2F;ban him. Not going to happen.<p>Hell, locally one&#x27;s IP often changes thanks to DHCP leases expiring.<p>&gt; C) Scrutinize accounts who are using an IP that is swarming with accounts from other countries.<p>This won&#x27;t scale, and that&#x27;s entirely the point. They catch ExpressVPN and co because there are 500+ accounts from each of the pool of ~20 IP addresses they have. They probably just block the whole subnet mask. VPS is the same, &quot;this is a datacenter IP range. No customer is running out of a datacenter, it must be being used as a VPN.&quot;<p>But a guy&#x27;s home connection of 50&#x2F;20 mbit&#x2F;s can only handle two users, and can&#x27;t be flagged as belonging to a datacenter, and can&#x27;t be range-blocked. I&#x27;m sure there will be cases of a person wanting access to 10+ regions, but for the most part, people just want one extra region. In my case, Japan. In most people&#x27;s cases, the US.