Is phone farming illegal?

Legal vs illegal, side by side

Each row pairs something legal with the illegal activity it gets confused with. The line is rarely the hardware: it's whether the output pretends to be real people, deceives advertisers or messages people who didn't ask.

Grey areas

These aren't crimes in themselves, but they break platform rules, carry real risk, or depend on details only a lawyer can weigh.

Grey

Automating your own account beyond what the platform allows. Usually a terms breach, not a crime: the risk is bans and lost earnings. The US Supreme Court narrowed the anti-hacking law in 2021 but left contract-based limits open. Van Buren v. United States (2021)

Grey

Reward-app farming. Running "earn" apps on many phones usually breaks those apps' terms and gets accounts closed. Where it deceives advertisers at scale, it moves towards ad fraud. Google Play ratings, reviews and installs policy

Grey

Reselling your phones' bandwidth as proxies. Not a crime in itself if you consent, but your IP addresses carry other people's traffic. In January 2026 Google acted against the IPIDEA proxy network, which it said 550+ threat groups had used in one week. Google Threat Intelligence, 30 Jan 2026

Grey

Scraping. Depends on the site's terms, whether you're logged in, how you access it and whose personal data you collect. Some public, logged-out scraping has won in US courts; that isn't blanket permission. Contract, CFAA (Van Buren), GDPR

Phone farm vs SIM farm

They aren't the same thing. A phone farm is many phones run together, often on Wi-Fi, to operate apps. The UK's new offence targets SIM farms: a device that can use five or more physical SIM cards to make calls or send texts, the kind of kit behind scam-text campaigns. Devices that only carry video or data, such as broadcast encoders, aren't SIM farms. The Home Office guidance describes legitimate uses in broadcasting, transport and electronic communications, says its examples aren't exhaustive, and doesn't say whether SIM-equipped phones run together count as one device.

By country

United States

Owning phones and running device labs is legal. Since 21 October 2024 the FTC rule bans fake reviews and the buying or selling of fake followers, views and likes for commercial purposes, with penalties up to $53,088 per violation. Ad fraud is prosecuted as wire fraud. Automated calls and texts need prior express consent under the TCPA.

United Kingdom

Owning many phones isn't the offence. From 29 October 2026, possessing or supplying a device that can use five or more physical SIM cards to call or text is an offence without a good reason; the guidance describes legitimate uses in broadcasting, transport and electronic communications, and doesn't say whether SIM-equipped phones run as one system count as one device. Fake reviews have been a banned practice under the DMCC Act since 6 April 2025, a civil matter with fines up to 10% of global turnover.

European Union

Since 28 May 2022, submitting or commissioning false reviews or social endorsements, including likes, is always an unfair commercial practice, with maximum fines for widespread breaches of at least 4% of turnover. The Digital Services Act requires the largest platforms to assess manipulation through inauthentic or automated use, which is one reason fake-account enforcement is systematic. National rules vary.

India

Online impersonation and identity theft are offences under the IT Act (sections 66C and 66D). Obtaining SIMs by fraud or personation, or tampering with identifiers such as IMEI, is an offence under the Telecommunications Act 2023, with up to three years in prison. The national standard for online reviews (IS 19000:2022) launched as voluntary in 2022; we found no source making it mandatory.

This page covers four jurisdictions. Elsewhere, laws vary; don't assume silence means permission.

What platforms and payment processors ban

Even where no law applies, platforms and processors set the practical limits, and their penalties arrive faster than any court's.

• Social platforms: Meta, TikTok, YouTube and X all ban fake engagement and mass-created or inauthentic accounts.
• App stores: Google Play bans inflating installs, ratings and reviews, including through automated services.
• Ad networks: Google treats bot clicks and views as invalid traffic and can suspend the accounts involved.
• Payment processors: Stripe lists "sales of online traffic or engagement" as a prohibited business. Lose your processor and you lose your revenue.

Questions to ask before you run anything at scale

1. Whose accounts are these, and can you show written permission from each owner?
2. Does the platform allow this kind of automation (official API, partner access, published rules)? If it only works because the platform can't tell, stop.
3. Does anything you produce pretend to be a real, independent person: reviews, ratings, followers, likes, views, installs or votes?
4. Would an advertiser pay for any of the traffic, and is a real person behind every click or view?
5. Can any single device use five or more SIMs to call or text? In the UK, can you state a good reason in writing?
6. Are you messaging people, and do you have their consent (US TCPA) and a lawful basis (UK, EU)?
7. Are your devices' IP addresses being resold to anyone through proxy or "bandwidth" software?
8. Are you collecting personal data, on what lawful basis, and where is it stored?
9. Would you describe the service in exactly these words to your payment processor and hosting provider?
10. Which countries are you, your clients and the affected users in, and has a lawyer there looked at it?

Where PhoneFleet draws the line

PhoneFleet rents real Android phones for testing, QA, AI agents and the accounts and workflows you're entitled to run. Our Acceptable Use Policy bans fraud, spam, fake engagement, fake installs and reviews, bulk fake accounts and SIM farms, and accounts that break it may be suspended without refund.

Rent real Android phonesRead the phone farm guide

Phone farming and the law: questions