The IPs Fraud Teams Trust Most Might Be the Riskiest

This report analyzes a 90-day dataset of 170+ million residential proxy IPs and shows that many residential IPs are simultaneously available across multiple proxy providers and churn rapidly, undermining reputation-based fraud detection. It recommends verification-based detection (directly observing proxy pools), tracking persistence and recency of proxy activity, and providing context (detection method, update cadence, persistence) so fraud teams can make accurate, auditable decisions rather than relying on brittle provider or static reputation signals.