At ThinkNow, we’ve spent over a decade building DigayGaneTM, our proprietary online consumer panel designed to connect brands with diverse, hard-to-reach audiences in the U.S. and Latin America. Today, DigayGaneTM powers thousands of interviews monthly and fuels insights for Fortune 500 companies, government agencies, and media partners alike. But behind the clean dashboards and seamless user experience lies a constant battle: maintaining data integrity in an ecosystem vulnerable to bots, bad actors, and evolving fraud tactics.
This blog shares what we’ve learned over seven years of defending the integrity of the Hispanic online panel. These lessons have shaped DigayGaneTM into one of the most trusted multicultural research panels in the industry.
When I joined the company in late 2017, DigayGaneTM was in the midst of scaling its reach and capabilities. We celebrated every new signup because expansion meant greater statistical representativeness, better segmentation, and, of course, higher revenue. However, the joy brought by volume came with a silent threat: fraud. The success of our panelist recruitment campaigns—referral programs, programmatic ads, social media promotions—turned into open hallways for bots, cloned accounts, and users who discovered how to “farm” rewards without adding any value.
As fraud threats evolved, so did the need for a more strategic approach to panel protection. Being appointed Panel Security Director wasn’t just about guarding credentials. It meant designing a socio-technical system that rewarded genuine panelists while deterring, detecting, and eliminating opportunists. This blog chronicles that journey, from early failures and hard lessons to the solutions that today form a highly effective three-phase model.
I’ll also outline the challenges on the horizon, like the rise of generative AI to global data regulation, and the strategic ideals that, in my opinion, will shape the next decade of digital market research.
In 2018, our dashboards showed seemingly healthy indicators: completion rates above 80% and average survey times below estimates. It was tempting to call it a “success.” The wake-up call came when blatant inconsistencies, contradictory and nonsensical answers, began to appear. This forced us to acknowledge that speed is not always synonymous with efficiency. Sometimes it’s pure fabrication.
The first lesson was paradigm-shifting as it revealed that fraud is not just a technical issue, but also an economic and sociological one. The attacker values the incentive and assesses the cost of outsmarting us. That’s why our countermeasures had to raise the “cost” of attacking while minimizing friction for legitimate users.
Two-Factor Authentication (2FA) at Signup
We adopted a simple approach. The more dynamic the verification, the lower the chance of automated replication. Implementing SMS-based 2FA resulted in a 38% reduction in the creation of profiles using temporary emails within the first three months. The key metric wasn’t just the drop in fraudulent volume, but also the conversion rate and retention. After some UX improvements, we lost just three percentage points of legitimate signups, an acceptable cost for the benefit gained.
Real-Time Geolocation
We inserted a microservice that, before confirming registration, validates the IP and compares the declared country with physical location. Of 10,000 daily attempts, 7% came from VPNs jumping regions to access higher-paying studies. Automatic blocking, combined with manual review, created a visible deterrent: after six weeks, proxy attempts dropped to 2%.
Welcome Call
Many in the industry see welcome calls as costly. For us, it was qualitative gold. Over 90% of respondents demonstrated genuine intent. Evasiveness was highly correlated with low-quality scores in later rounds. The call also revealed linguistic nuances that enriched our demographic questionnaire. For example, we learned that certain anglicisms confused lexical verification algorithms in the southern border area near Mexico. We retrained our models and improved dialect matching accuracy by five percentage points.
Geo-Verification via Newsletters
We turned the monthly mailing into a digital “proof of life.” We added tracking pixels to log opens and IPs, without compromising privacy (only storing partial hashes). If a panelist fails to open three newsletters or opens them from inconsistent locations, they are quarantined. This practice reduced zombie email inventory by 26% and cleaned our base for targeted campaigns.
Device Fingerprinting
We implemented device fingerprinting, which combines user-agent, screen resolution, time zone, and 40 other attributes. When the same device tries to register multiple identities, the system applies elasticity: two profiles are allowed (e.g., siblings), but three or more trigger an audit flag. Thanks to this policy, we detected a cluster in China operating 120 profiles pretending to be in California. We dismantled it in under 48 hours.
Adaptive Captchas and S2S Redirects
We migrated from reCAPTCHA v2 to an adaptive system triggered only on suspicious events, preserving ease of access for legitimate users. In parallel, we consolidated all survey redirects into an encrypted SHA-1 S2S bus. Traffic no longer exposed tokens in the frontend, and we blocked malicious URL injections that were stealing incentives. Today, every survey completion generates a checksum validated in real-time, saving 60% compared to the previous architecture.
Data Reconciliation
We trained a gradient boosting model to evaluate semantic coherence, item-level response time, and cross-survey similarity. Responses in the bottom 10th quality percentile are queued for human review. We discard an average of 3.2% of interviews per study, resulting in a 12-point increase in our Net Promoter Score and higher client satisfaction in 2024.
Social Media Groups as a Strategic Trust Layer
We created closed communities on Facebook and TikTok where top panelists receive previews of new projects and participate in AMA sessions with researchers. This “trust ring” serves two functions:
Now active in 17 countries, DigayGaneTM handles thousands of interviews daily, of which less than 3% are flagged for review and only 0.6% are discarded due to confirmed fraud. But the most significant achievement isn’t statistical—it’s cultural. The company now understands that security and quality are inseparable from the value proposition, not just technical appendices.
My journey as Panel Security Director has taught me that the fight against fraud is a relay race, not a sprint. To professionals just starting on this path, I’d say, invest in people before tools, document every hypothesis, celebrate small wins, and embrace constructive paranoia. Because, in the end, security is the science of anticipating others’ creativity, and creativity, both good and malicious, never rests.
Want to know more about our advanced anti-fraud solution? ThinkNow Shield combines cutting-edge AI and proprietary tools to safeguard your data. Learn more.