Bluesky implements a ‘more aggressive’ impersonation policy

Bluesky has updated its impersonation policy to be “more aggressive” after third-party analysis highlighted its verification problem. The Bluesky Safety account said that the social media service is removing accounts that are impersonating other people and those squatting on handles. Bluesky doesn’t have a conventional verification system, so it’s easy for unscrupulous users to pretend to be someone else either for attention or to scam other people. That may not have been a serious problem in the past, but the recent influx of new users threw the issue into stark relief.

While users can verify their identities on Bluesky by linking their account to a domain name, the process isn’t as straightforward as paying for a checkmark. They’d have to add a string of text to the DNS record associated with their domain so that they could claim their URL. For instance, we could claim the Engadget.com handle on Bluesky if we go through this self-verification process. Individuals can link their accounts to personal domains or pay for Bluesky’s custom domain service. In its new announcement, the platform say’s it’s working with organizations and high-profile individuals to set up their verified handles.

That said, when a user verifies their account, their old handle (typically username.bsky.social) gets freed up and becomes available to other people who sign up. Alexios Mantzarlis, the third party from Cornell Tech who analyzed the app’s userbase, found that 44 percent of Bluesky’s 100 most-followed accounts have a doppelganger. That is why Bluesky now requires parody, satire or fan accounts to label themselves as such in both their handles and their bio. If they don’t, or if they only indicate the nature of their account in one of those elements, then they’ll be treated as an impersonator and will be removed from the platform.

Bluesky now explicitly prohibits identity churning, as well. Accounts that start as impersonators with the purpose of gaining new users, and who then switch to a different identity in an attempt to circumvent the ban, will still get booted off the app. Finally, it says it’s exploring “additional options to enhance account verification,” though they’re not quite ready for rollout.