Home → Use cases → Ad accounts

Ad accounts for several advertisers

A media buyer or agency holding access to a dozen advertisers' ad accounts is doing something platforms explicitly support. What they do not support is the resemblance that follows from doing it all in one browser, and association is the mechanism behind most of the collateral damage in this job: one client's problem reaching accounts that had nothing to do with it.

Why association is the real risk

Ad platforms treat accounts that share signals as one entity. That is deliberate and mostly sensible: it is how they stop a disabled advertiser from simply opening another account. The side effect is that an agency operating ten advertisers from one machine has, from the platform's point of view, built exactly the structure that policy is designed to catch.

• One browser, one fingerprint. Every advertiser you touch inherits the same canvas, WebGL, fonts and screen signature.
• One IP. Every account logs in from the same address, which is the oldest and strongest association signal there is.
• Shared cookies and storage. Platform cookies persist across tabs and sessions and quietly tie accounts together even when you log out between them.

None of that is a problem until one advertiser is reviewed. Then the review has a list of related accounts, and the list is your client book.

The shape that works

One profile per ad account

Not per client, and not per platform. If an advertiser runs three ad accounts, that is three profiles. Two accounts sharing a profile are permanently associated from the first login, and care afterwards does not undo it.

A stable address, matched to the advertiser

Bind a proxy per profile and leave it. Two reasons, and the second is the one people miss. First, consistency: an account that always appears from the same place generates no location-change signal. Second, plausibility: an advertiser targeting Germany whose account is operated from an address in another country is a mismatch a reviewer can see. Make the proxy's timezone and locale agree with the profile, since a contradiction there is worse than having no proxy at all.

Groups per advertiser, access per person

Group by advertiser so a buyer can be given the accounts they run and nothing else. When someone leaves, access goes with the group rather than requiring a password change at twelve clients. Team members each get their own login, so there is no shared credential that former staff still know.

Handover that does not involve a password

The session lives in the profile. Pass the profile and the next buyer is already logged in, with no credential spoken aloud or pasted into a chat. For accounts you access through a client's Business Manager rather than their password, this still matters: the session, the device signature and the two-factor state all travel with the profile instead of living on one person's laptop.

Reporting, not interaction

Pulling yesterday's spend out of nine dashboards is mechanical work worth automating, and no-code RPA or the local API will do it per profile. The distinction that matters: gathering data you already have access to is fine, and automating clicks on ads or engagement is both detectable and against every platform's rules. The browser does not change which of those you are doing.

What isolation does not fix

• Billing is the strongest link of all. The same card or payment method across several ad accounts associates them directly, at the account level, where no browser reaches. If genuine separation matters, it has to be separate at the billing level too.
• Business Manager relationships are explicit. Accounts linked inside a platform's own structure are linked by design and are meant to be.
• Shared people link accounts. One personal profile administering several advertisers is a connection the platform records deliberately.
• Creative and landing pages link accounts. The same domain, pixel or creative across advertisers is an association no fingerprint work touches.

Isolation closes the browser-level connections. It is one layer of several, and treating it as the whole answer is how people end up surprised.

Setting it up

1. A group per advertiser.
2. A profile per ad account inside it, named so a colleague knows what it is.
3. A proxy bound per profile, consistent with where that advertiser operates, verified in the fingerprint test.
4. Log in once inside the profile; the session follows you between machines.
5. Give each buyer access to their groups only.

Related: agencies, social media management, affiliate marketing, how accounts get linked.