Commons:Requests for checkuser

Shortcuts: COM:CHECK • COM:RFCU • COM:SOCK

This is the place to request investigations of abuse of multiple accounts or of other circumstances that require use of checkuser privileges.

Requesting a check

These indicators are used by CheckUsers to allow easier at-a-glance reading of their notes, actions and comments.
Request completed
Confirmed Technically indistinguishable
Likely Possilikely
Possible Unlikely
Inconclusive Unrelated
 No action Stale
Request declined
Declined Checkuser is not for fishing
Checkuser is not magic pixie dust.8ball The CheckUser Magic 8-Ball says
 It looks like a duck to me Checkuser is not a crystal ball.
Information
Additional information needed Deferred to
 Doing… Info

Please do not ask us to run checks without good reason; be aware of the following before requesting a check:

  1. Checkuser is a last resort for difficult cases; pursue other options first, such as posting on the administrator's noticeboard. (This is not a venue for requesting administrative action such as blocks or file clean-up.)
  2. Running a check will only be done to combat disruption on Commons, or as required to assist checkuser investigations on other Wikimedia wikis.
    • Valid reasons for running a check include, for example: vandalism where a block of the underlying IP or IP range is needed and suspected block evasion, vote-stacking, or other disruption where technical evidence would prevent or reduce further disruption.
    • Requests to check accounts already confirmed on other projects may be declined as redundant.
    • Requests to run a check on yourself will be declined.
  3. Evidence is required. When you request a check, you must include a rationale that demonstrates (e.g., by including diffs) what the disruption to the project is, and why you believe the accounts are related.
    • Requests to run a check without evidence or with ambiguous reasoning will result in delays or the request not being investigated.
  4. The privacy policy does not allow us to make a check that has the effect of revealing IP addresses.

Outcome

Responses will be brief in order to comply with Wikimedia privacy policy. Due to technical limitations, results are not always clear. Closed requests are archived after seven days.

Privacy concerns

If you feel that a checkuser request has led to a violation of the Wikimedia Foundation privacy policy regarding yourself, please refer the case to the Ombuds commission.

Category:Sockpuppet investigations#Requests%20for%20checkuser

If this page is displaying outdated contents even after you refresh the page in your browser, please purge this page's cache.

To request a check:

Cases are created on subpages of Commons:Requests for checkuser/Case.

Creating a request
  • Insert the name of the suspected sockpuppeteer (the main account or puppetmaster, not the sockpuppet!) in the box below, leaving out the "User:" prefix. Do not remove the text in the box, add to the end only.
  • Please explain/justify the request by saying what it is you suspect and why it is important that the check be carried out. Indicate the usernames you suspect, using {{checkuser}}. Please do not use this template in the section header, as that makes it difficult to read the account names. Include the diffs or links required to support the request and reason for it.
  • There are people to assist you and help with maintenance of the page. Just ask for help on the admin noticeboard if you really are stuck, or take your best shot and note that you weren't completely sure of what to say.
  • If a case subpage already exists, edit the existing page instead, either adding to the currently open section (if the case is not yet archived) or adding a new section to the top using {{subst:Commons:Requests for checkuser/Inputbox/Sample}} (if the case has been archived). When editing an existing case, be sure to list/transclude the subpage here.
Transcluding the request
Example
If you want to request a checkuser on User:John Doe, enter the text Commons:Requests for checkuser/Case/John Doe then click "Request a checkuser". You will be taken to a page where you can fill out the request. Please make your request there brief and concise.

Checkuser requests to be listed (empty)
nothing found

Requests

Andrew William11

Status: open • view • edit • history • watch
Filed: 04:38, 14 April 2026 (UTC)

Rationale, discussion and results

Reason: The user has made many small edits to file pages for flags over a short period of time, then swapped to the alleged other account and either reverted or made wholesale removals of text from the file pages. The users have a pattern of making small edits such as incorrectly changing the 'date' parameter to the date of the conceptual flag's creation rather than the file, removing and adding file summaries in different languages, and self-reverting. The accounts exhibit similar bizarre editing patterns characterised by several quick edits and subsequent self-reverts, similar username structure ("Andrew [name][number]"), and file overlap within days of each other. Andrew William11 was created 9 April 2026 and immediately began editing files within this topic; Andrew Christian1992 then edited these files days later. Andrew Christian1992 has also exhibited the same disruptive editing pattern on English Wikipedia, where some of their edits have been rolled back for "unexplained content removal."

Overlap of editing on Commons, same articles edited by both users:

File:War Flag of the Philippines (1936–1985, 1986–1998).svg

File:Flag of the Philippines (1943–1945).svg

Additional unconstructive edits: File:Flag of the Philippines (1919–1936).svg

File:Flag of the Philippines (1936–1985, 1986–1998).svg

Shared behavioural pattern:

  • Both of the accounts modify SVG flags' pages.
  • Both make rapid bursts of very small edits, zero-byte edits, and self-reverts (tagged "Manual revert" in history).
  • Both show the same pattern of rapid addition and subsequent removal of the same material in articles, as well as the types of changes, i.e. changing date formatting, removing content in certain languages

Andrew William11 date-field alterations — systematic changes to |date= fields, including factual changes:

Andrew Christian1992 caption removals — bulk removal of non-English captions (Spanish, Russian, Persian, Filipino) on the same files William11 had previously edited, including removal of attribution (|user=Mabuhay1946) on File:War Flag of the Philippines (1936–1985, 1986–1998).svg.

  • Andrew Christian1992 exhibited this editing pattern on English Wikipedia, making 17 edits to Union Jack in 35 minutes/ This included multiple zero-byte edits, self-reverts (two within seconds), and continued editing after a substantial partial revert by an editor with an explanatory edit summary. Andrew William11 has no English Wikipedia edits.
  • The new-account creation pattern suggests that the user may have other accounts performing similar patterns of edits. CheckUser would help identify any additional accounts being used in this way.

Transgenderoriole (talk) 04:38, 14 April 2026 (UTC)

LuvsMG481

Status: open • view • edit • history • watch
Filed: 23:26, 12 April 2026 (UTC)

Rationale, discussion and results

Reason: Account was attached on Commons (registered on enwiki 9 September 2025 but never edited) after LuvsMG481 got into hot water at Commons:Administrators' noticeboard/User problems#User:LuvsMG481. Similarly filing DRs for pictures of girls. Both nominated Commons:Deletion requests/File:Nudist girl.jpg. - Alexis Jazz ping plz 23:26, 12 April 2026 (UTC)

Possible  On hold At this time, I don't see a strong enough connection to issue a block, but I've reached out to the CheckUser mailing list for assistance interpreting the results. The Squirrel Conspiracy (talk) 03:52, 13 April 2026 (UTC)

Carlosarevalohn

Status: open • view • edit • history • watch
Filed: 21:56, 12 April 2026 (UTC)

Rationale, discussion and results

Reason: Jairojimenez6 might be related per COM:ANU#Jairojimenez6.   — 🇺🇦Jeff G. ツ please ping or talk to me🇺🇦 21:56, 12 April 2026 (UTC)

 Possilikely I see that Jairojimenez6 has been blocked based on behaviour and tagged as suspect, that seems correct to me. --Lymantria (talk) 05:38, 13 April 2026 (UTC)
No sleepers? The reported account was not the only one who acted similar to the previous socks. Nakonana (talk) 12:21, 13 April 2026 (UTC)
@Nakonana: Can you name the others? Perhaps they can be blocked on behavior.   — 🇺🇦Jeff G. ツ please ping or talk to me🇺🇦 12:42, 13 April 2026 (UTC)
Sure, here's a list of editors whose entire edits revolve only around uploading and nominating files for deletion that are about Canal 24 Honduras and Carlosarevalohn:
The files around which those accounts appear to be active are:
There may be more files and accounts, I didn't put all of them on my watchlist after the first round of disruptionbback in January. Nakonana (talk) 13:06, 13 April 2026 (UTC)
Another file from this group which was initially uploaded by user Carlosarevalohn, then nominated for deletion by their sock Yovanyhn, and recently reuploaded by the now blocked suspected sock Jairojimenez6 is
File:Noticieros Telecinco Honduras.jpg, see User talk:Carlosarevalohn/Archive 1#File:Noticieros Telecinco Honduras.jpg. Nakonana (talk) 13:19, 13 April 2026 (UTC)
And there are another two users who are now targeting Canal 24 Honduras related uploads by the above listed Juan20mx:
Based on
Nakonana (talk) 13:45, 13 April 2026 (UTC)
The more I dig, the longer the list:
Nakonana (talk) 13:55, 13 April 2026 (UTC)
Nakonana (talk) 14:05, 13 April 2026 (UTC)
I have had a quick look, but that did not bring me enough clarity. My time is limited for the next couple of days. I hope one of the other CUs can step in. --Lymantria (talk) 20:34, 13 April 2026 (UTC)

Telesonp

Status: open • view • edit • history • watch
Filed: 17:56, 12 April 2026 (UTC)

Rationale, discussion and results

Reason: Both edited File:He got caught!.jpg. Oppod123 also uploaded the similarly named File:He got caught.jpg. Their edits share a common topic: en:Scratch (programming language); Telesonp added a Scratch template to the aforemention file, while Oppod123 inserted a scratch.mit.edu URL to Category:Мультфильмы студии «Союзмультфильм». NguoiDungKhongDinhDanh 17:56, 12 April 2026 (UTC)

Oppod123's translations are likely machine or LLM-generated. NguoiDungKhongDinhDanh 18:09, 12 April 2026 (UTC)

Democfest

Status: resolved • view • edit • history • watch
Filed: 14:35, 10 April 2026 (UTC)

Rationale, discussion and results

Reason: All of these have already been confirmed as socks on enwiki, and have been active on Commons. Requesting a CU block of these accounts. CutlassCiera 14:35, 10 April 2026 (UTC)

+1. Exact same cropping style. Mirroring same behaviour. I  Strong support these accounts being indeffed for sockpuppeting. LuvsMG481 (talk) 14:53, 10 April 2026 (UTC)
Declined, no check needed here. We accept checkuser results from other wikis. The block request can be done at COM:AN/B. --Lymantria (talk) 07:58, 11 April 2026 (UTC)

Josefo Ludovico

Status: resolved • view • edit • history • watch
Filed: 02:46, 10 April 2026 (UTC)

Rationale, discussion and results

Reason: They upload the same type of files, using the date and time of the photograph as the title. It's currently in the verification queue on the Spanish Wikipedia, but due to the urgency, I request that it be check here, considering it has already created sockpuppets here. Taichi (talk) 02:46, 10 April 2026 (UTC)

Results: These data are not easy to judge, consider these as preliminary results:

Confirmed to each other and Likely to this case
Likely to each other and to the case:
Blocked and tagged. I cannot dive deeper into this case today, probably in the weekend. Other CUs: feel free to step in. --Lymantria (talk) 05:51, 10 April 2026 (UTC)

Trantrongnam~conmonswiki

Status: resolved • view • edit • history • watch
Filed: 15:22, 9 April 2026 (UTC)

Rationale, discussion and results

Reason: similar username and modus operandi. M.Bitton (talk) 15:22, 9 April 2026 (UTC)

Results: Confirmed to earlier socks:

Blocked and tagged. --Lymantria (talk) 05:17, 10 April 2026 (UTC)

Emanuel Sefullahu

Status: resolved • view • edit • history • watch
Filed: 03:33, 8 April 2026 (UTC)

Rationale, discussion and results

Reason: Cross-wiki promotion for the same person. Regards, ZI Jony (Talk) 03:33, 8 April 2026 (UTC)

Results: Confirmed:

Blocked and tagged. These results appear to be equal to those at enwiki. --Lymantria (talk) 05:46, 8 April 2026 (UTC)

@Lymantria, thanks for quick response, and take action on Wikidata as well. Regards, ZI Jony (Talk) 05:59, 8 April 2026 (UTC)

Rishabam4

Status: resolved • view • edit • history • watch
Filed: 12:03, 7 April 2026 (UTC)

Rationale, discussion and results

Reason: Copyvio supporting UPE, potential sockpuppetry. Please see en:Wikipedia:Sockpuppet investigations/Rishabam4 for details and check for sleepers.   — 🇺🇦Jeff G. ツ please ping or talk to me🇺🇦 12:03, 7 April 2026 (UTC)

Rakshita24 is not registered here. Rishabam4 does not yield sleepers. I see that enwiki CU has confirmed socking. No comment on IPs. --Lymantria (talk) 16:35, 7 April 2026 (UTC)
@Lymantria: Thank you. Done for me.   — 🇺🇦Jeff G. ツ please ping or talk to me🇺🇦 18:14, 7 April 2026 (UTC)
For older requests, please see Commons:Requests for checkuser/Archives
Category:Sockpuppet investigations