Data and accounts

Account safety and team access

Marketplace and ad-account rules, browser profiles, fingerprints and giving VAs safe access.

13 guides9 in-depth51 min of reading

Marketplaces and ad platforms decide whether two accounts belong to the same business from many signals at once: login IPs and devices, payment methods, addresses, tax IDs, and the people with access. That is how they enforce their rules on related accounts, and it is why a security mistake on one account can affect another. Most account problems for legitimate sellers don't come from running several businesses. They come from shared passwords passed around a team, staff logging in from unexpected countries, one payment card used across unrelated entities, or a hacked site that triggers a policy flag. The guides in this topic start from each platform's written rules and treat account safety as an access-control problem.

The rules differ by platform. Amazon's related-accounts policy allows one Seller Central account per region unless there is a legitimate business need, and related accounts can be deactivated together. eBay and Etsy allow several accounts or shops but forbid using one to get around a restriction. TikTok Shop allows more than one shop for separate brands or regions and forbids duplicates. Browser fingerprinting explains the device signals behind these checks: user agent, fonts, canvas and WebGL rendering, and TLS handshakes, none of which Incognito mode changes. AdsPower vs Multilogin vs GoLogin compares browser profile managers for teams that need sessions kept separate per client or brand.

Team access comes next. Managing client accounts as an agency starts with each platform's own delegation tools: Meta Business Manager partner access, Google Ads manager accounts, Shopify collaborator accounts and Amazon user permissions. Each person gets their own least-privilege login, and access is removed the day they leave. Virtual cards limit spend and contain fraud per vendor, and also explain why payment details link accounts. When something goes wrong, the 15-minute response plan and the Google Ads circumventing-systems guide say the same thing: don't open a replacement account. Secure every login, find the actual cause, and send one appeal with evidence through the official channel.

Start here

Account safety & teams5 min read

Amazon Section 3 and related accounts: when a second seller account is allowed and how to run several securely

Amazon allows one Seller Central account per region unless you have a legitimate business need, such as separate brands run as separate businesses, and every account is in good standing. Accounts Amazon considers related can be deactivated together. Run additional accounts openly, give staff user permissions instead of shared logins, and keep each business's records clean.

Account safety & teams5 min read

Agency multi-account security: how to manage 50+ client ad and seller accounts without shared logins or cross-client risk

Use each platform's delegation tools first: Meta Business Manager partner access, Google Ads manager accounts, Shopify collaborator accounts and Amazon user permissions. Give every staff member their own login with least-privilege roles, isolate each client's sessions in a separate browser profile, use known static IPs, and offboard access the same day someone leaves.

Account safety & teams4 min read

Account suspended on Amazon, Meta or Stripe? The 15-minute emergency response plan

In the first 15 minutes: don't open a replacement account, screenshot the exact notice and cited policy, secure every login with new passwords and 2FA, and freeze changes to devices, payment methods and team access. Then find the root cause and submit one complete, evidence-backed appeal through the platform's official channel.

All account safety & teams guides

Account safety & teams4 min read

Google Ads "Circumventing Systems" suspension: what triggers it, how to appeal, and how to protect your ad accounts

Circumventing systems is one of Google Ads' most serious policies: accounts can be suspended without warning for cloaking, redirects that hide the real landing page, evading earlier enforcement, or running ads from a compromised account. Don't open a new account. Find the cause (often a hacked site, a redirect in your tracking setup or a link to a previously suspended account), fix it, document it and appeal through the official form.

Account safety & teams4 min read

Running multiple TikTok Shops: what's allowed, how to structure brands and entities, and how to keep every shop secure

TikTok Shop allows sellers to run more than one shop in some cases, for example separate brands or regions, but forbids duplicate shops and shops opened to get around a penalty. Give each shop a real, verified business identity, run your team through Seller Center user permissions instead of shared logins, secure every account with 2-step verification, and keep each shop's performance healthy because violations can affect linked shops.

Account safety & teams4 min read

Browser fingerprinting: how anti-fraud systems recognize a browser even in Incognito mode

Browser fingerprinting identifies a device from attributes it exposes to every website: user agent, screen, timezone, fonts, canvas and WebGL rendering, audio processing, and network signals such as TLS handshakes. Incognito mode clears cookies but changes none of these, so the same device stays recognisable across sessions and accounts.

Account safety & teams3 min read

A 4-point proxy and browser leak test to run before logging in to a store

Before logging into any revenue-generating store, run a 60-second pre-flight check across four endpoints: IPQualityScore (fraud score under 15), BrowserLeaks WebRTC (zero local LAN leak), Whoer.net (100% timezone and DNS match), and Pixelscan (consistent hardware fingerprint). Fix any failure before you log in.

Account safety & teams3 min read

Delegating Amazon, eBay or Shopify store access to virtual assistants safely

Never share master passwords or allow overseas VAs to log in from foreign IPs. Create an encrypted browser profile inside AdsPower or GoLogin bound to a US/UK Static Residential proxy, log in once, and share the pre-authenticated cloud profile with your VA using Role-Based Access Control (RBAC).

Tools these guides recommend

Disclosure: these are affiliate links. If you sign up through them, I may earn a commission at no extra cost to you. How this site makes money.

More in data and accounts