Wikipedia:Requests for checkuser

(Redirected from Wikipedia:RFCU)

CheckUser is the process of checking information about two or more users (including named users and IPs). Special users are able to check if two or more accounts have been used from the same computer. These users also see User agents. This can help them decide if two accounts are related in the way described above. It is also possible to see if a user is editing from an open proxy.

On this page, users can request some users or IPs to be checked. Good reasons should be given for why a checkuser is needed; you should provide links which show the questionable edits, etc. Questions should usually be created so that they can be answered by yes or no. Responses will be short in order to comply with Wikipedia privacy policy. Sensitive information (like the IP addresses used by an account) are usually not reported. The results are not always clear, and a decision should not be made only on the basis of checkuser results.

Use of the toolEdit

This tool is to be used to fight vandalism, to check for sockpuppet abuse, and to limit disruption of the project. It must be used only to prevent damage to the project.

The tool should not be used for political control; to apply pressure on editors; or as a threat against another editor in a content dispute. There must be a valid reason to check a user. Note that alternative accounts are not forbidden, so long as they are not used in violation of the policies (for example, to vote more than once or to make it look like more people support an idea). Checkusers will refuse a request, if the reason for checking is not good enough to warrant the use of the tool.

Please see the CheckUser policy for all the rules related to CheckUser.

Users with CheckUser accessEdit

The technical list can be found at Special:ListUsers/checkuser.
User:BarrasUser:JamesofurUser:VermontUser:Operator873User:DjsassoUser:Lofty abyssUser:PeterdownunderUser:BarrasUser:Bsadowski1User:JamesofurUser:Fr33kmanUser:The Rambling ManUser:MajorlyUser:EptalonUser:CreolUser:M7


Current requestsEdit

Please add requests to the top of the list.



Both of their editing involves the 9jabased Wiki and also their signatures are very similar. Bobor001's signature LionbobLion's signature If they end up being related, a global lock should be requested for LionbobLion. --Ferien (talk) 17:58, 24 October 2021 (UTC)[]

I'd be curious to see if User:444metaphor is related at all as well. I placed a block there after they basically straight up admitted to being a sock, but the editing pattern is similar in some ways. --Gordonrox24 | Talk 21:02, 24 October 2021 (UTC)[]
Both those accounts have been blocked. Bsadowski1, you may also want to check 444metaphor. Thanks. --Ferien (talk) 09:47, 25 October 2021 (UTC)[]


Undisclosed paid-for spam which creates spam pages in an identical manner (not saying here). They've been around for over a year on en.wp: en:Category:Suspected_Wikipedia_sockpuppets_of_BolsaOObsequios.

Recently reactivated en.wp socks blocked by myself:

Check the deleted contributions. MER-C (talk) 18:23, 22 October 2021 (UTC)[]

First of all, the accounts listed under recently reactivated don't exist. Secondly, the edits by the accounts above looks like pretty normal Wikipedia edits. One of them, Allensyllos, I think created a page which was deleted as advertising (at Rfd), and again deleted as QD. So far, I do not see any behaviour where a checkuser is required. If a block is needed, a regular admin can block the user.--Eptalon (talk) 19:04, 22 October 2021 (UTC)[]
I think you read the message wrong, the two in that section are ones on en.wp not here. -Djsasso (talk) 20:05, 22 October 2021 (UTC)[]
No worries, as I wrote above, I don't think the few we have listed above have shown problem behaviour here...--Eptalon (talk) 20:22, 22 October 2021 (UTC)[]
I sent you an email describing the abuse pattern. MER-C (talk) 10:26, 23 October 2021 (UTC)[]


Previously blocked on en.wp[1] for spamming. Repeating the same here including removing deletion template from IP using fake edit summary[2]. Listed the IPs as there might me more socks. Ramaswar(discuss) 20:29, 12 October 2021 (UTC)[]

We can't comment on IPs and since there is only one account here it will be up to an admin to judge what needs to happen. -Djsasso (talk) 20:12, 22 October 2021 (UTC)[]


Looks like an obvious sock of Kimsa Sok. For reference see w:en:Wikipedia:Sockpuppet investigations/Kimsa Sok. --Trezoo (talk) 12:02, 6 October 2021 (UTC)[]

I think that can be duck blocked. SHB2000 (talk) 12:09, 6 October 2021 (UTC)[]
@SHB2000: Agreed. I just didn’t know where to make the request, so I put it here. --Trezoo (talk) 12:11, 6 October 2021 (UTC)[]
I just reported the account to stewards + VIP. Generally though, they get locked quicker than blocked because, we have some admins here, uhm... find identifying LTAs to be... very difficult. SHB2000 (talk) 12:14, 6 October 2021 (UTC)[]
In my opinion, we have many admins who can identify lots of LTAs, especially in comparison to smaller wikis (e.g. enwikiquote). --Ferien (talk) 09:49, 25 October 2021 (UTC)[]


Suspecting unpaid COI. Reminds me of these socks I found some time ago. Made-up name, similar editing styles, edits company articles. Etoza (?) 15:32, 27 September 2021 (UTC)[]


First edit appears to be an edit to User talk:Sakura emad in a discussion where a couple of socks were recently blocked by Bsadowski1. Requesting CU for sleeper accounts. SHB2000 (talk) 01:42, 25 September 2021 (UTC)[]

When Bsadowski blocked the user, he certainly checked for sleepers...--Eptalon (talk) 12:15, 25 September 2021 (UTC)[]
this account popped up right after those accounts were blocked. SHB2000 (talk) 12:27, 25 September 2021 (UTC)[]
Check for sleepers. Derpdart56 (talk) 16:48, 28 September 2021 (UTC)[]
Don't worry that is being watched. -Djsasso (talk) 16:49, 28 September 2021 (UTC)[]

Socks at Wikipedia:Requests for deletion/Requests/2021/Susovan Sonu RoyEdit

Likely socks used to keep the Susovan Sony Roy article and disrupt the RfD process. Added an IP that might be related although I know you can't comment on IPs. And the last user is the person who created the article. SHB2000 (talk) 04:34, 22 September 2021 (UTC)[]

Also pinging @Achim55: about this. SHB2000 (talk) 04:42, 22 September 2021 (UTC)[]
Added two more accounts. —Yahya (talkcontribs.) 18:55, 24 September 2021 (UTC)[]
No comment on the ip, as promised. Antezblik, Sikpink, and Gringotee are likely the same user. Onukrit, Colaheed, and Caresthen are unrelated to the first three, and to each other.--Eptalon (talk) 19:49, 24 September 2021 (UTC)[]
Omkmandy (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · SUL · CA · checkuser (log))
Vineunify (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · SUL · CA · checkuser (log)) (added 12:00, 25 September 2021 (UTC))
Another user is acting similarly. --Ferien (talk) 09:02, 25 September 2021 (UTC)[]
Bsadowski1 ran some checks, and found that Omkmandy,Vineunify,Onukrit,Colaheed and Caresthen are lkely connected/the same user. Blocks were put in place. --Eptalon (talk) 09:26, 26 September 2021 (UTC)[]


Both were involved in the Wikidestruction article and they keep editing each others' talk page. Darubrub (Let me know) 15:07, 16 September 2021 (UTC)[]

pointless: cu's are not allowed to associate usernames and ip addresses.-Eptalon (talk) 15:25, 16 September 2021 (UTC)[]
Also, they're all blocked now. Ferien (talk) 15:26, 16 September 2021 (UTC)[]
@Eptalon what do you mean. 🌸 Sakura emad 💖 (talk) 15:28, 16 September 2021 (UTC)[]
I mean that according to the Checkuser policy, checkusers are not permitted to give out information (on RfCU) that would allow to link an account and an IP address. What is listed above is one account name, and two IP addresses.--Eptalon (talk) 17:19, 19 September 2021 (UTC)[]

Possible connections?Edit

Hi, I think these two accounts might be connected to an article I spotted yesterday and sent to RFD. --Derpdart56 (talk) 13:10, 15 September 2021 (UTC)[]

Blocked as socks. -Djsasso (talk) 21:01, 22 September 2021 (UTC)[]


Per en:Wikipedia:Sockpuppet investigations/Xenen1970. MER-C (talk) 17:25, 11 September 2021 (UTC)[]

Blocked. -Djsasso (talk) 21:11, 22 September 2021 (UTC)[]


You may be wondering why I'm reporting PDL. Well, lets say we had a little incident on the Africa stub and PDL accused Auntof6 of admin abuse (Wow Antaradus was right) and made a personal attack at her. He was blocked for 6 months due to Onestrike and soon abandoned his account. However, I saw this vandalism only account pop up. Is it impersonation or was PDL "back for revenge"? (Antaradus' observation page is actually useful). PDL has a history of socking on the en-wiki, so I'm not so sure this is just an impersonation. If it is discovered that these are the same person(s) then please globally ban PDL and extend the block here to indefinite. Also, PDL, if you're reading this, I said I wouldn't interact but hey, curiosity got the cat. Ely - Talk 04:04, 9 September 2021 (UTC)[]

Hello there; the account with the ..nn.. has less than 20 edits; and I have to say that as to addresses, there's no overlap. As to blocking, both users are currently blocked, so there's little to do here anyway.--Eptalon (talk) 19:47, 10 September 2021 (UTC)[]
Seems to be impersonation. Thanks for the report though! Best, Vermont (talk) 04:03, 16 September 2021 (UTC)[]