← back to blog

Choosing which accounts to keep when you downsize

Why fleets get too big before anyone notices

Nobody sets out to run three hundred accounts. It happens one account at a time. A campaign needed five more, a platform change broke ten, a warm-up batch ran long and got kept “just in case.” Two years later you’re paying for proxies and phone rentals on accounts nobody has logged into since March, and half your infrastructure spend is going toward accounts that generate nothing.

Downsizing isn’t just about cost. A fleet that’s too large to actively manage is also a fleet that’s easier to get wrong. Stale sessions, forgotten warm-up schedules, and infrastructure you haven’t checked on in months are exactly the conditions that produce clustering and bans, because nobody is watching the signals until something breaks. Cutting down to what you can actually maintain properly is a security decision as much as a financial one.

What actually makes an account worth keeping

The instinct is to rank accounts by age or by follower count or by whatever surface metric feels like “value.” That’s the wrong axis. The thing that determines whether an account is worth keeping is how clean and how isolated its history is, because that history is what the platform’s trust model is built on.

A few concrete things to check per account:

Verification depth. Accounts tied to a verified phone number and a stable email you still control are worth more than accounts sitting on a burner number you can no longer receive SMS on. If you can’t pass a re-verification challenge today, the account is a liability, not an asset, no matter how old it is.

Environment history. This is the one operators skip and shouldn’t. Every account has been logged into from some combination of IP addresses and device fingerprints over its life. If an account was ever run on a shared datacenter IP, a proxy that’s since been reused across other accounts, or a browser profile that overlaps with other identities you control, that account carries a link in the platform’s graph that you can’t erase by just being careful going forward. Keeping it means keeping a weak point.

Warm-up quality. An account that was created and used with a realistic ramp in activity, matched to a consistent device and location, behaves differently in a platform’s models than one that was mass-created and pushed into heavy use immediately. The former has a behavioral baseline that looks like a person. The latter has a baseline that looks like a batch. If you don’t remember how an account was warmed up, that itself is information: it probably wasn’t done carefully.

Restriction history. Any account that has been previously limited, shadow-restricted, or asked to complete an identity challenge should be treated as marked, even if it’s currently active. Platforms don’t forget these events even after the visible restriction lifts. These are usually the first accounts to go.

Current isolation. Is the account still running on its own residential or mobile IP and its own browser or device profile, or has it drifted onto shared infrastructure over time because someone consolidated proxies to save money? An account that’s technically clean but currently sitting on shared infrastructure is only as safe as the other accounts sharing that infrastructure.

Score before you cut

Before deleting or archiving anything, go through the fleet and score each account against those five points. You don’t need a formal rubric, a simple pass or fail on each is enough to sort accounts into three groups: clearly keep, clearly cut, and needs a closer look.

The accounts in the middle group are the ones worth spending time on, because they’re usually the ones where a small amount of infrastructure cleanup (moving to a dedicated proxy, refreshing a stale device profile) turns a marginal account into a solid one. Don’t spend that effort on the “clearly cut” group. It’s tempting to think a bit of care can rescue a flagged or badly clustered account, but you’re fighting a history that’s already written into the platform’s records, not something you can warm-up your way out of.

What to cut first

In roughly the order it usually makes sense to remove:

  1. Accounts sharing infrastructure with accounts you’re keeping. If an account was ever on the same proxy or device fingerprint as one you’re planning to keep, and you can’t fully separate them going forward, the shared one is the one that should go. Correlated accounts are a risk to each other, not just individually.
  2. Accounts with unresolved verification gaps. If you can’t currently pass a phone or email check on the account, it’s a countdown.
  3. Accounts that were mass-created without individual warm-up. These tend to be the least resilient in the fleet and the cheapest to have made in the first place, so losing them costs the least.
  4. Dormant accounts you can’t fully account for. If you don’t have clean records of what IP, device, and login pattern an account has used historically, you’re keeping unknown risk. Better to retire it than guess.
  5. Accounts serving a use case you’ve already dropped. Obvious, but worth stating: don’t keep paying to isolate an account for a campaign that ended.

Retire accounts properly, don’t just walk away

This is the part that gets skipped under time pressure. If you’re cutting a proxy subscription or a cloud phone rental to save cost, log into the accounts tied to that infrastructure first and sign them out or set them to whatever end state you want, rather than just cancelling the service underneath them. An account left logged in on infrastructure that’s about to change hands, expire, or get reassigned to a different customer is an account you no longer control the exposure of. If the IP or device gets reused by someone else afterward, and the account happens to reconnect to it later through a saved session or app cache, that’s a fingerprint collision you created by rushing the cutover.

The same logic applies to browser profiles in an antidetect setup. A profile that’s being decommissioned should have its account state cleared, not just be closed and forgotten, especially if the underlying proxy is being handed to a different account afterward.

Right-sizing the isolation stack, not just the account count

Once you know which accounts survive the cut, the infrastructure question answers itself. Each kept account should end up with its own residential or mobile IP and its own isolated browser or device profile, matched to that account’s actual usage pattern (location, activity hours, device type). Isolation only works as protection when it’s one environment per account. It’s the consolidation that happens quietly over time, sharing a proxy across “just a couple” accounts to save a subscription, that undoes the whole point of running dedicated infrastructure in the first place.

A smaller fleet run with strict one-to-one isolation is a stronger position than a large fleet where a third of the accounts are sharing infrastructure to cut costs. The math on cost per account almost always favors fewer, cleaner accounts over more, thinner ones, because a flagged or clustered account costs you the infrastructure spend on it plus whatever it drags down with it.

Keep a record going forward

Whatever fleet size you land on, keep a simple log per account: creation date, verification method, the proxy and device profile it’s tied to, and warm-up history. The next time you need to downsize, or the next time a platform tightens its detection, that record is what lets you make this decision in an afternoon instead of guessing account by account again.

If you’re rebuilding a fleet around dedicated proxies, isolated browser profiles, and cloud phones sized to what you can actually maintain, that’s the core of what we run and write about at Multi Account Ops.

Get new guides and videos first — join the Telegram channel.

need infra for this today?