The 4-Layer Account Detection Stack: Why IP Rotation Alone Fails

I keep seeing the same advice in e-commerce communities: "use a VPN, use residential proxies, clear your cookies." This fixes one layer. Modern platforms check four. Layer 1: Network Identity What platforms check: IP address, IP reputation (residential vs. datacenter), ASN (reveals proxy provider) What works: Residential proxies with sticky IPs per account What doesn't: Datacenter VPNs, shared proxy pools, rotating IPs mid-session Layer 2: Browser Environment (The Tricky One) This is where most people's setups fail. Canvas fingerprint : Your GPU renders a hidden <canvas> element. The pixel output hashed into a unique ID. This ID is: Hardware-specific (GPU model + driver + OS combination) Session-persistent (doesn't change between page loads) Cookie-independent (clearing cookies does nothing) VPN-transparent (proxies have zero effect) WebGL renderer : WebGLRenderingContext.getParameter(gl.RENDERER) returns a string like "ANGLE (NVIDIA GeForce RTX 3080 Direct3D11 vs_5_0 ps_5_0)" . Identi