Before opening an investigation, you need good reason to suspect sockpuppetry.
- Evidence is required. When you open the investigation, you must immediately provide evidence that the suspected sock puppets are connected. The evidence will need to include diffs of edits that suggest the accounts are connected. (This requirement is waived if the edits in question are deleted; in this case just provide the names of the pages that the accounts have been editing.)
- You must provide this evidence in a clear way. Vaguely worded submissions will not be investigated. You need to actually show why your suspicion that the accounts are connected is reasonable.
Investigations are conducted by a clerk
or an administrator
, who will compare the accounts' behaviour and determine whether they are probably connected; this is a behavioural evidence
investigation. Upon request, investigations can also be conducted by a CheckUser
, who can look at the physical location of the accounts (and other technical data) in order to determine how likely it is they are connected; this is a technical evidence
Due to Wikipedia's CheckUser policy
How to open an investigation:
To open an investigation (or case), enter the user name (or if there isn't one, IP address) of the oldest-created account (the "sockmaster"), or the previous case name, in the box below, then click "Submit". Note: Do not include "User:" or any other commentary.
For example, if the case name is about User:John Doe or a prior case was at Wikipedia:Sockpuppet investigations/John Doe, you should enter John Doe in the box below.
You will then be taken to another page containing a form you must complete to open the investigation. The process for opening a subsequent investigation on the same user is the same as for creating a new case. Again, do not include "User:" in any of the sock or ip fields.
If you also wish a CheckUser to investigate, change |checkuser=no to |checkuser=yes in the edit box on the next page and explain why you are requesting it.
You can also open an investigation using Twinkle
if you are autoconfirmed
. After installing Twinkle, an "ARV" option will appear in the "TW" tab on any user, user talk, or user contributions page. Clicking on this option and selecting either "Sockpuppeteer" or "Sockpuppet" will allow you to fill in a few simple fields to file a report. The report will be automatically formatted for you.
If you are an anonymous (IP address) editor, and the case page is protected or does not exist, please click "show" to the right and use the box below
Cases currently listed at SPI
If this page has been recently modified, it may not reflect the most recent changes.
Please purge this page
to view the most recent changes.
Quick CheckUser requests
Use this section to request checkuser information relating to a situation that does not involve sock puppetry. You could use this section to request, for example:
- Underlying IPs of an account, where the autoblock has expired or been ineffective.
- Collateral damage checks for the informed hardblocking of IPs or ranges.
- IP block exemption checks before granting IPBE (or to verify it is being used constructively).
For threats of harm (to self or others)
you must email emergency
wikimedia.org (see the threats of harm page
) and not use this page. Requests to investigate and confirm sockpuppetry should be listed in the sockpuppet section above, and not here (such requests will be summarily removed).
To make a request here, copy the following template and paste it to the end of this section (quick link to edit
) – replacing "header" with an informative title, and adding underneath the template any relevant information – then sign using "~~~~", preview, and click "save".
==== HEADER ====
Last edited on 27 May 2021, at 19:42
Content is available under CC BY-SA 3.0
unless otherwise noted.