Who is the registered account holder?¶

The registered account holder is the person or organisation whose details the provider has recorded against the account.

That can be an excellent lead — particularly where the provider has verified those details — but it still helps to ask what was actually checked, when, and whether the same person was using the account at the relevant time.

Start with the registration record¶

Useful fields may include:

• stable account ID;
• supplied name;
• email address;
• telephone number;
• postal or billing address;
• payment details;
• account-creation time;
• verification status; and
• later changes to those details.

A return might look like:

That last field changes how you describe the name.

The provider can reliably say what name was supplied. It cannot necessarily say that the person using the account was David Foster.

Verification can vary enormously¶

A bank account and a discussion forum may both have “account holder” fields, but the registration process behind them can be completely different.

A service may:

• formally verify identity;
• verify only control of an email address;
• verify a telephone number;
• check a payment method;
• perform no meaningful identity verification at all.

Find out which applies to the account you have.

Details can change over time¶

A current recovery number may not be the number used when the account was created.

An email address may have been replaced.

A payment method may have been added later.

If the history matters, preserve provider change records rather than relying only on the current settings.

Registration and use are different stages¶

Even a correctly verified account can later be:

• shared;
• delegated;
• sold;
• compromised; or
• accessed from another device.

So use the holder record for what it does well: identifying the person or organisation connected to registration.

Then follow the relevant event into sessions and devices if you need to show who actually used it.

Who created the account?, who controlled it? and who was actually using it? are separate questions for exactly this reason.

The practical point is: the registered holder tells you whose details the provider associated with the account. Check the verification behind those details, then connect later activity separately.