Commons:RFCU

Shortcuts: COM:CHECK • COM:RFCU • COM:SOCK

This is the place to request investigations of abuse of multiple accounts or of other circumstances that require use of checkuser privileges.

Requesting a check

These indicators are used by CheckUsers to allow easier at-a-glance reading of their notes, actions and comments.
Request completed
Confirmed Technically indistinguishable
Likely Possilikely
Possible Unlikely
Inconclusive Unrelated
 No action Stale
Request declined
Declined Checkuser is not for fishing
Checkuser is not magic pixie dust.8ball The CheckUser Magic 8-Ball says
 It looks like a duck to me Checkuser is not a crystal ball.
Information
Additional information needed Deferred to
 Doing… Info

Please do not ask us to run checks without good reason; be aware of the following before requesting a check:

  1. Checkuser is a last resort for difficult cases; pursue other options first, such as posting on the administrator's noticeboard. (This is not a venue for requesting administrative action such as blocks or file clean-up.)
  2. Running a check will only be done to combat disruption on Commons, or as required to assist checkuser investigations on other Wikimedia wikis.
    • Valid reasons for running a check include, for example: vandalism where a block of the underlying IP or IP range is needed and suspected block evasion, vote-stacking, or other disruption where technical evidence would prevent or reduce further disruption.
    • Requests to check accounts already confirmed on other projects may be declined as redundant.
    • Requests to run a check on yourself will be declined.
  3. Evidence is required. When you request a check, you must include a rationale that demonstrates (e.g., by including diffs) what the disruption to the project is, and why you believe the accounts are related.
    • Requests to run a check without evidence or with ambiguous reasoning will result in delays or the request not being investigated.
  4. The privacy policy does not allow us to make a check that has the effect of revealing IP addresses.

Outcome

Responses will be brief in order to comply with Wikimedia privacy policy. Due to technical limitations, results are not always clear. Closed requests are archived after seven days.

Privacy concerns

If you feel that a checkuser request has led to a violation of the Wikimedia Foundation privacy policy regarding yourself, please refer the case to the Ombuds commission.

Category:Sockpuppet investigations#Requests%20for%20checkuser

If this page is displaying outdated contents even after you refresh the page in your browser, please purge this page's cache.

To request a check:

Cases are created on subpages of Commons:Requests for checkuser/Case.

Creating a request
  • Insert the name of the suspected sockpuppeteer (the main account or puppetmaster, not the sockpuppet!) in the box below, leaving out the "User:" prefix. Do not remove the text in the box, add to the end only.
  • Please explain/justify the request by saying what it is you suspect and why it is important that the check be carried out. Indicate the usernames you suspect, using {{checkuser}}. Please do not use this template in the section header, as that makes it difficult to read the account names. Include the diffs or links required to support the request and reason for it.
  • There are people to assist you and help with maintenance of the page. Just ask for help on the admin noticeboard if you really are stuck, or take your best shot and note that you weren't completely sure of what to say.
  • If a case subpage already exists, edit the existing page instead, either adding to the currently open section (if the case is not yet archived) or adding a new section to the top using {{subst:Commons:Requests for checkuser/Inputbox/Sample}} (if the case has been archived). When editing an existing case, be sure to list/transclude the subpage here.
Transcluding the request
Example
If you want to request a checkuser on User:John Doe, enter the text Commons:Requests for checkuser/Case/John Doe then click "Request a checkuser". You will be taken to a page where you can fill out the request. Please make your request there brief and concise.

Checkuser requests to be listed (empty)
nothing found

Requests

Dylanjak

Status: resolved • view • edit • history • watch
Filed: 22:46, 20 May 2026 (UTC)

Rationale, discussion and results

Reason: Uploading promo photos for non-notable individual whose entire catalogue of LTA and spam has been deleted multiple times. This time has changed their name to evade detection. Both accounts created May 20, 2026. Neither photos has any exif and are uncanny valley. -Yupik (talk) 22:46, 20 May 2026 (UTC)

New accounts from the signature files. -Yupik (talk) 22:57, 20 May 2026 (UTC)
Confirmed together with
Blocked and tagged. --Lymantria (talk) 05:38, 21 May 2026 (UTC)

Amaar017

Status: resolved • view • edit • history • watch
Filed: 20:59, 20 May 2026 (UTC)

Rationale, discussion and results

Reason: This case has already been detected as involving multiple accounts on the English and French Wikipedias, with 5 socks. It's noteworthy that the suspicious account consistently uploads logos of Moroccan companies. Both the socks and the suspicious account have received several warnings and even brief blocks. The SPI on the English Wikipedia stopped in July 2025, but the suspicious account was registered in October 2025. Taichi (talk) 20:59, 20 May 2026 (UTC)

Confirmed that Mixinlord = WikiEdWoq. As the latter is confirmed to Amaar017 at enwiki, tagging to Amaar017 as master. Both blocked. --Lymantria (talk) 06:37, 21 May 2026 (UTC)

Jaredryandloneria

Status: resolved • view • edit • history • watch
Filed: 00:35, 20 May 2026 (UTC)

Rationale, discussion and results

Please see Special:Diff/1216880163.   — 🇺🇦Jeff G. ツ please ping or talk to me🇺🇦 00:35, 20 May 2026 (UTC)

Likely Blocked and tagged. --Lymantria (talk) 05:30, 20 May 2026 (UTC)

Ngọc Lâm Trần

Status: resolved • view • edit • history • watch
Filed: 21:39, 13 May 2026 (UTC)

Rationale, discussion and results

Reason: Uploaded photo at with the author claimed to be Trần Ngọc Lâm. Easier to view at File:Không Bao Giờ Quên.jpg. --Henry (dat) 21:39, 13 May 2026 (UTC)

Master is Stale, the suspected socks are Confirmed to each other. Already locked and tagged. No action taken. --Lymantria (talk) 07:24, 16 May 2026 (UTC)

Ptha111

Status: resolved • view • edit • history • watch
Filed: 18:24, 13 May 2026 (UTC)

Rationale, discussion and results

Reason: Uploaded unfree files about Vietnamese artists and singers. Please check for other socks and global lock request. Thank you. --Henry (dat) 18:24, 13 May 2026 (UTC)

I've added Sasstish112 as this account has uploaded apparent copyvio File:Hoangnhatmai.jpg right after the previous upload by Ptha111 had been deleted. --AFBorchert (talk) 20:42, 14 May 2026 (UTC)

Results: Confirmed or Likely to each other and on behavioural grounds connected to this case:

All tagged as suspect. Most of these accounts have been globally locked already, blocked the remaining ones. --Lymantria (talk) 07:33, 16 May 2026 (UTC)

@Lymantria: We just got a fresh sockpuppet: Mirrorenglish (talk • contribs • Luxo • SUL • deleted contribs • logs • block user • block log) who re-uploaded File:Dongthanhbinh.jpg which was previously uploaded by Christemdunst. --AFBorchert (talk) 06:20, 18 May 2026 (UTC)
Likely Already blocked and tagged. --Lymantria (talk) 11:23, 18 May 2026 (UTC)
For older requests, please see Commons:Requests for checkuser/Archives