Use Cases

What is Sneaker Botting?

Sneaker botting is the use of automated software to buy limited-release footwear the moment it goes on sale, faster than any person can check out. Bots poll product endpoints and fire prepared checkout requests from many accounts and IP addresses at once, using stored payment and address profiles. Retailers treat it as a terms-of-service violation and build defences against it.

The pipeline has two halves. A monitor polls a store for the product going live, which on Shopify sites often means a public product JSON feed exposing variant IDs before any page links to them, and pushes an alert. A task group then runs one checkout attempt per account profile: add to cart, submit shipping and payment, solve or supply a CAPTCHA token, confirm. The gap between a product appearing and inventory clearing is frequently measured in seconds, so round-trip time to the store decides who gets through.

Proxy requirements here are unusual. Throughput barely counts; latency to the retailer's edge does, so operators pick addresses geographically near the CDN point of presence serving the store. Concurrency per address is the other limit, since dozens of parallel carts from one IP is an obvious pattern. Checkout is stateful, with cart and checkout tokens bound to cookies and a session, so an address that rotates mid-flow discards the cart. The usual arrangement is a sticky session for each checkout and a fresh address per task.

On the other side sit commercial bot-management platforms such as Akamai Bot Manager and HUMAN, plus queue and draw systems that convert a race into a lottery. Nike's SNKRS draws and Adidas splash pages exist specifically to remove the speed advantage. Detection combines TLS fingerprinting, device and browser signals, behavioural sensor data collected by JavaScript, and per-account history. Datacenter ranges get scored badly by ASN alone, which is why residential and mobile addresses dominate this space.

Consequences arrive after the fact as often as during. Retailers void orders days later and blacklist the accounts, payment instruments and shipping addresses that recur across many purchases. In the United States, the statute aimed at bot purchasing, the BOTS Act, covers event tickets rather than retail footwear, so sneaker retailers fall back on their own terms, cancellations and bans. Anyone costing this out should price bot licences, proxy bandwidth, accounts and cancelled orders together rather than counting only the checkouts that went through.

Where you meet it

The real question arrives when someone asks which proxies to buy for a drop. Raw speed test numbers are close to irrelevant. What counts is round-trip time to the retailer's edge, how many parallel tasks a single address can carry before it looks wrong, and whether the range has already been burned by other people's tasks. Sticky sessions through the checkout are non-negotiable.

Common questions

Are sneaker bots illegal?

In most places there is no statute specifically banning bot purchases of footwear. The US BOTS Act targets event ticketing. Sneaker retailers rely on their terms of service, which automated purchasing violates, and enforce with order cancellations, account bans and blocked payment or shipping details. Resale itself is generally legal; the buying method is the contested part.

Why do sneaker bots need residential or mobile proxies?

Retail bot-management systems score IP addresses partly by the network they belong to, and known cloud and hosting ranges are treated as suspect before a single request is examined. Residential and mobile addresses belong to consumer ISPs and carriers, so they start from a neutral score. Latency to the store's edge and a clean history then decide whether tasks complete.

Why was my order cancelled after a successful checkout?

Confirmation is not fulfilment. Retailers run post-purchase review that groups orders by payment instrument, shipping address, account age, device fingerprint and IP, then voids clusters that look automated. Orders can be cancelled days later, and the associated accounts and addresses are often flagged for future releases as well.

Related terms

Bot Detection
Bot detection is the practice of separating automated traffic from human traffic. Systems score each request against network signals, transport-layer fingerprints, browser characteristics and behaviour over time, then allow, challenge or block it. Vendors including Cloudflare, DataDome, Akamai and HUMAN sell this as a service running in front of the origin server.
Web Scraping
Web scraping is the automated collection of data from websites. A program requests pages over HTTP, extracts fields from the HTML or JSON that comes back, and writes them as structured records. Scale ranges from one script polling a page to distributed crawlers that rotate proxies and render pages in a browser.
Multi-Accounting
Multi-accounting is operating several accounts on one platform from the same machine or team. Platforms link accounts by IP address, cookies, device fingerprint and behaviour, so each identity needs its own consistent set of those signals, typically a separate antidetect browser profile paired with a separate and stable proxy exit.
Account Farming
Account farming is registering accounts in bulk and warming them with ordinary activity before they are used. New registrations carry the least trust on any platform, so operators age them and build a history, keeping each one on a consistent IP, device fingerprint and behaviour pattern. Most platforms prohibit the practice in their terms.
Ad Verification
Ad verification is the practice of checking that ads ran as they were bought: the right creative, the right geography, an acceptable page, a viewable position. Because ad delivery is decided from the request's IP, device and profile, verification teams load publisher pages from many locations and record exactly what was served.
Price Monitoring
Price monitoring is the repeated collection of competitor prices, stock and promotions from retail sites and marketplaces. Retailers vary what they display by country, currency, delivery postcode, device and account, so the IP and session of the collecting client decide which price it records. That is why the checks run through geo-targeted proxies.
SEO Monitoring
SEO monitoring is the continuous tracking of where a site ranks in search engines for a defined set of queries, broken down by country, city, language and device. Because search results are localised and often personalised, rank trackers run each query from an IP address in the target market rather than from one office connection.

Real 4G/5G mobile and residential IPs

PROXIES.SX runs carrier IPs in 100+ countries with HTTP and SOCKS5 on every endpoint. $4/GB down to $2.40/GB at volume, free endpoints and rotation, and your GB never expire.