A connection opens an investigation.

From the source

OWASP distinguishes automated creation of new accounts from attacks using existing credentials. The distinction helps define the investigation.

At the case desk

Our promotion exercise asks a separate policy question: who is eligible for the credit? A shared IP is one observation, not an answer about identity or intent.

Which observation would distinguish a shared household from coordinated misuse?

Source checked 5 November 2026. Our interpretation and fictional exercise are separate from the source guidance. No affiliation or endorsement is implied.