Twitter is under pressure to make it easier for users to report abuse after more than 54,000 people petitioned the company over the case of a feminist campaigner who says she was repeatedly threatened with rape.
Caroline Criado-Perez helped lobby the Bank of England to make a woman the new face on the country's £10 note, to defuse criticism that women were under-represented on the currency, with Jane Austen chosen in the end.
Criado-Perez was then "targeted repeatedly with rape threats" by ill-wishers objecting to her activity, according to the petition, which called on Twitter to urgently add a 'report abuse' button to its service.
Some users proposed a one-day boycott of Twitter on 4 August to protest against what they said was its failure to address the issue. Labour MPs also wrote to Twitter complaining of its "weak" response after the firm told Criado-Perez to take her complaints to the police.
Twitter's general manager for the UK, Tony Wang, said the company was testing ways to make it easier to report abuse from within tweets.
"We're testing ways to simplify reporting, [such as] within a tweet by using the 'Report tweet' button in our iPhone app and on mobile web," he said.
He also promised to suspend all accounts found to be in breach of its rules. "We take online abuse seriously," he wrote.
He added that victims can currently report each case of abuse through Twitter’s online forms – but others pointed out this was impractical when high-profile users receive hundreds of messages a day.
Policing the web
Twitter notes in its support documents that users may also want to contact police. "If an interaction has gone beyond the point of name calling and you feel as though you may be in danger, contact your local authorities so they can accurately assess the validity of the threat and help you resolve the issue offline."
Criado-Perez took that advice and last night a 21-year-old man from Manchester was arrested on harassment charges.
"Trolls don’t run the internet; neither do abusive men who issue rape threats to get women to shut up," Criado-Perez wrote in The Independent. "We are the majority. And if we stand firm, and shout back as one, we will win."
Short on friends? James Clegg can sell you a few. How about a thousand or so followers on Twitter, delivered overnight for about a penny apiece?
Clegg (not his real name) is part of a growing and extremely profitable underground that thrives on the sale of followers on Facebook, Instagram, YouTube, and other social networks. But Twitter—where your follower count can be a prized badge of honor—is where the real money is. Following my July 3 report on the growing popularity of the fake-follower sales business, Clegg emailed me to offer an inside look into the way the business works, including detailed reporting on all the money that changes hands.
Clegg’s business is simple: You visit one of his 13 websites that sell fake followers, and punch in how many you want to buy. Today, the going rate for 1000 Twitter followers is about $11.
For many people who look at this mammoth industry, the first question is "Why?" Why would anyone spend money for friends who don’t exist? “There is no one single type of buyer,” says Clegg. “I have had minor celebrities, big corporations, comedians, people buying for their friends for a practical joke, and many more. I’d say the majority are companies looking to get themselves from 20 followers to 1000 followers—and they start their real social media marketing from there.”
A business is born
Clegg is relatively new to working on the fringes of the Web. He was a chartered accountant in the United Kingdom when he got the idea for his current venture from the website Fiverr, an online marketplace where users can sell anything for $5: Folks were selling thousands of fake Twitter followers on that site for cheap.
Realizing that such services were selling for more on eBay and elsewhere online, Clegg figured he would buy the follower offers on Fiverr and then resell them on eBay for twice the price, pocketing the difference with minimal effort. Eventually eBay got saturated and prices fell to the point where it wasn’t worth Clegg’s time. The wheels were turning, however, and within five months Clegg had quit his finance job and was in the fake-follower business for himself, full-time.
Today, Clegg’s vast network sells thousands upon thousands of social media followers to those hungry for instant social media credibility.
Clegg sent a few hundred followers to one of our accounts. This is what happens.
Not your typical scam artist
Clegg is 29 and, like most entrepreneurs of his ilk, he works from home. The Cheshire, England-based businessman relies heavily on outsourcing and on the law of large numbers to turn a profit.
Google frowns on the fake-follower business, so running just a single website for such services isn’t likely to be successful. To stay ahead of the search engine, Clegg now runs 13 follower-sales websites, only a few of which have made it big, thanks to a heavy SEO investment to boost those sites to the top of search engine results. The smaller sites support the broader business by appealing to different niches.
According to Clegg, the monthly P&L for a solidly performing fake-follower site will look a little like the list below. (I’ll explain the line items afterward.)
Sales
Twitter followers: $6000
Twitter retweets: $300
Total: $6300
Expenses
Twitter followers: $600
Twitter retweets: $30
Link building: $2400
Outsourced SEO: $600
Customer service: $600
Total: $4230
Net profit: $2070
To summarize: From a single website he operates, Clegg earns about $2000 on sales of $6000 worth of Twitter followers per month. A top performer, he says, will do even better. “The sites that rank well will receive around 80 to 100 orders per day. An average order value of $29.50 gives a potential daily sales of $2500-plus.” In the past ten months, he says he has cleared £85,000, or about $128,500.
As the financials indicate, fake Twitter followers are the best sellers, but the hot emerging market is in fake retweets. Clegg says that customers often purchase them alongside followers, and that they give the buyer an extra bump in legitimacy.
One of Clegg’s faux followers. Looks legit, no?
The high cost of manufacturing faux followers
None of this comes for free, of course, and keeping all the websites up and running involves significant expense, almost all of it in the form of outsourced labor.
An Indian programming team produces and maintains the followers. It’s all bot-based, collating information from a variety of sources, which are sliced, diced, and compiled into the bio, photo, and tweets that make up a “user.”
Some of these users (see the screenshot above) look frightfully legitimate. A fake follower is often designed with a specific theme in mind: A Justin Bieber fan will tweet out only pictures that come up in a search for Bieber in Google Image Search, and will retweet messages that use the #JustinBieber hashtag. New tweets might be a combination of two old tweets from unrelated users. “All this can be controlled from a central point at any time,” says Clegg, “so creating a specific sort of follower isn’t that hard to do once you get started.”
This kind of work is surprisingly inexpensive. Much more challenging is the job of keeping the fake-follower sites out of the cellar in Google’s search results. Google is prone to penalizing such businesses as spam, but it also recognizes inbound links to a site as a form of legitimacy. So, Clegg labors on link building to combat any spam penalties. It’s a delicate dance that works most of the time, or at least for a while. “In a typical month, I will have a team of four full-time link builders (from the Philippines) working 40 hours per week, each earning around $150 per week,” says Clegg.
Complaints are natural, and they often arise when Twitter manages to find and delete a large number of fakes. (PCWorld reached out to Twitter for comment, but didn't receive a response by press time.) A customer may request a “top up”—for which Clegg is happy to oblige—but customer service requires an outsourced agent who can be present to answer questions, all day, by live chat, Skype, or email.
Still, after all of those expenses are paid, Clegg is earning about a 30 percent return.
Can the party keep going?
Clegg concedes that the fake-follower industry won’t be a gold mine forever. There isn't just Google to contend with, there’s also Twitter. “They are becoming faster and much more efficient at stopping the practice,” says Clegg. “A low-quality follower that has been created on the same IP as 50 others in the past 24 hours will be deleted within the next 24 hours, and any accounts that are related to it will be suspended pending verification. This is why we focus on uniqueness in the followers themselves, to try to stay one step ahead of Twitter security.”
Clegg is, in fact, getting out of the game. His final website—FollowersBoost—is near completion, and after it’s done he’ll be moving on to other projects. “I left finance because I fancied myself as an entrepreneur,” he says. “In a few months I will have paid off my mortgage, and I can start to invest in different products and services, some online and some offline.”
There’s also plenty of risk. A tiny policy change from Google or Twitter can destroy six months of work overnight, so it’s natural that Clegg might want to find something a bit more stable. And then there’s the social fallout: “Selling fake followers isn’t something that you tell your girlfriend’s parents about. It’s a little bit embarrassing,” he quips.
Clegg says he has some qualms about the ethics of the business, saying that he thinks it’s the wrong way to build social presence, and that, ironically, he doesn’t set up fake followers for his own social campaigns. (The real Clegg has fewer than 100 followers on Twitter.)
Explaining his position, he says, “On a personal level I find it difficult to justify, but it goes a little something like this: If I were selling a product that nobody wanted, then I wouldn’t make any money, so I pass the moral-judgment decision to the consumer. Additionally, I always offer a money-back guarantee and advice on how to remove the followers. It’s the easiest way to clear the conscience.”
After a series of high-profile and embarrassing hacks, Twitter has rolled out a new, two-step login to help users prevent unwanted intrusions.
The "two-factor" verification system, which will be optional, asks users to register a phone number, e-mail account and six-digit code that would have to be entered, via text message, each time they log in to the site.
"Every day, a growing number of people log in to Twitter," Jim O'Leary, of the site's security team, said in a blog post. "Usually these login attempts come from the genuine account owners, but we occasionally hear from people whose accounts have been compromised by email phishing schemes or a breach of password data elsewhere on the web."
The move comes in the wake of repeated hacks to prominent Twitter accounts in recent months.
Last month, The Associated Press's Twitter account was compromised by someone who falsely tweeted that there had been a bombing at the White House.
It was the latest in a laundry list of media organizations hacked in recent months. Among them: The New York Times, Wall Street Journal, Washington Post, Bloomberg News, CBS, "60 Minutes" and "48 Hours."
In 2011, Fox News saw its Twitter account compromised and used to send a fake message that President Obama had been assassinated.
In February, Burger King and Jeep were similarly hacked. And earlier this year, Twitter itself was hacked. User names and e-mail addresses for about 250,000 users were exposed.
In many cases, account hacking happens when the target has an easy-to-guess password, accesses the account via public Wi-Fi, or forgets to log out after using an account on a publicly shared computer. Accounts can obviously also be accessed when a user who hasn't logged out loses his or her phone or has it stolen.
But high-profile victims are often targeted by phishing, where hackers send deceptive e-mails that encourage victims to enter personal information.
Privacy advocates have long called on Twitter to beef up its security. Many security experts applauded the move Thursday, at least partially.
"Right now Twitter's 2FA (two-factor authentication) is more likely to be welcomed by individuals who own personal accounts, and small companies with a Twitter presence, than embraced by the high profile victims attacked by the (hacker group) Syrian Electronic Army in the past," Graham Cluley, of Sophos Security, wrote on his blog.
But he said it's unlikely that many of the media outlets and other high-profile organizations that have been hardest hit will take advantage of the new tools.
"Sadly, I don't think it's going to help them at all," he wrote. "Media organizations who share breaking news via social media typically have many staff, around the globe, who share the same Twitter accounts. 2FA isn't going to help these companies, because they can't all access the same phone at the same time."
For those users, he recommends a system like Facebook, on which multiple users can access the same account, to varying degrees of authority, with their own unique accounts and passwords.
Twitter's O'Leary noted that the security upgrade isn't a cure-all.
"Of course, even with this new security option turned on, it's still important for you to use a strong password and follow the rest of our advice for keeping your account secure," he wrote.
