Harm:

Squatting

Definition: Collecting high value usernames for resale, ransom or confusion, rather than for use.
Motivation:
Financial
Legal Status:
Rarely criminalized
Platform ToS:
Allowed by Policy
Victim Visibility:
Aware
Classification:
Contextually Sensitive
TSPA Abuse Type:
None

Squatting refers to the practice of claiming unique platform identifiers (like username, email, or domain) with the intention of reserving them for resale, confusion or neglect, rather than for direct use. Some examples:

  • Candidates for political office often find that people have already snatched up the domains that might easily be associated with their campaign, and that those domains are either being held ransom, or are pointing to countervailing political candidates or causes.
  • Well known internet personae will often find that their username on one site has been scooped up on every other platform - diluting their brand across different monikers, and potentially leading to reputational harm.
  • High profile online services will often find that their users are redirected to malicious sites when they incorrectly spell the name of the website (for example - a malicious actor might scoop up the domain for gooogle.com (3 o's) so that when people mistype the URL of the popular search engine, they get a malicious or spammy page).

Squatting isn't necessarily a platform abuse in and of itself, but it does often lead to blackmail, user confusion, and account resale, all of which typically do constitute terms of service violations.

What features facilitate Squatting?

Identity
Individuals' ability to represent themselves in a digital space.

How can platform design prevent Squatting?

Cross platform username verification
To create an account with a popular username, require proof of ownership on another platform.
Limit account volume
Reducing the volume of accounts a person can create restricts their capacity to cause harm at scale.
Delete Abandoned Accounts
Prevent high-value usernames from being squatted on by periodically cleaning up inactive accounts.
Is something missing, or could it be better?
Loading...