01 / 04
Personas
Maya
First time user as a college student
Maya is a freshman who’s been hesitant to use AI for her projects. She decides to give it a go because one of her classes requires it. She uses her college email on her personal laptop and creates the account on her college’s wifi. There is no history related to her identifiers.
maya.lee@northstate.edu
Northstate University sign-in
College email
First trial
Sam
Returning user as a working professional
Sam is a second-time user. He created an account 3 years ago and cancelled before the free trial expired. He is now using a different email under a different identity provider, but the name, address, and credit card are the same. He wants to try again because AI has improved a lot.
sam.adebayo@gmail.com
Cancelled before the trial ended
2023
s.adebayo@outlook.com
Microsoft
Second trial
2026
Riley
Serial Free Trial User
Riley was eventually caught using 6 different emails from different identity providers. Each email’s name, birthday, and phone number are unique. She used each email to create a new account and switched when the free trial finished. The six accounts were never used at the same time. She was caught because she used the same credit card, the same device, the same browser, and the same ISP.
Riley Alvarez
riley.alvarez@gmail.com · Google
415-555-0148 · born 1998-04-12
Day 1
Priya Shah
priya.shah@outlook.com · Microsoft
646-555-0194 · born 1991-11-03
Day 2
Jordan Hale
jordan.hale@icloud.com · Apple
206-555-0117 · born 2001-07-22
Day 3
Casey Nguyen
casey.nguyen@yahoo.com · Yahoo
512-555-0160 · born 1987-01-30
Day 4
Morgan Ellis
morgan.ellis@proton.me · Proton
303-555-0188 · born 1995-09-14
Day 5
Avery Brooks
avery.brooks@fastmail.com · Fastmail
617-555-0133 · born 2003-02-08
Day 6
The Pharma Farm
Organized Farming Operation
The Pharma Farm is the name the fraud team gave the entity they think is using many devices on different operating systems (Linux, macOS, Windows), from different regions, suspected to come from third-tier cloud providers. The suspicion comes from a cluster of free-trial prompts focused on pharmacy research for a specific subset of drugs. That niche lines up with the customer’s newly released model, which ranked in the top 3 on pharma benchmarks.
lena.vogel@gmail.com
Google · Linux · Frankfurt
fp 91ac 4e07 · 185.199.4.12
Opened Mon
t.whitfield@outlook.com
Microsoft · Windows · Virginia
fp d03b 7a51 · 185.199.9.31
Opened Mon
wei.tan@icloud.com
Apple · macOS · Singapore
fp 2e68 b4c3 · 185.199.17.8
Opened Tue
conor.byrne@yahoo.com
Yahoo · Linux · Dublin
fp a5f1 83d9 · 185.199.4.77
Opened Wed
a.kulkarni@gmail.com
Google · Windows · Mumbai
fp 6b72 e0a4 · 185.199.22.5
Opened Thu
dana.ortiz@outlook.com
Microsoft · macOS · Oregon
fp c490 1f6d · 185.199.9.140
Opened Fri