Who paid for the account?¶

Payment records can be an excellent way of linking an online account to a real-world funding source.

But the person who paid, the registered account holder and the person using the account may still be different.

First identify what was paid for¶

The payment might relate to:

• a subscription;
• an advert;
• extra storage;
• a virtual number;
• a domain;
• a purchase;
• a premium feature; or
• some other service charge.

Record the provider transaction ID, amount, time, billing details and the payment instrument used.

That gives you a specific funding event to follow.

Follow the payment outside the service¶

Depending on the payment method, useful other records may include:

• bank or card records;
• payment-processor records;
• receipts;
• confirmation emails;
• wallet records;
• device artefacts; and
• communications about the payment.

A recurring payment instrument can also link several otherwise separate accounts or services.

Funding does not automatically mean operation¶

A parent may pay for a child.

An employer may fund an employee account.

One associate may pay for another.

A stolen payment card may be used without the cardholder's knowledge.

So keep these questions separate:

Timing can help¶

If the same device creates the account, receives a payment confirmation and immediately begins using the service, those events may fit together strongly.

If the payment method was added months later, it tells you something different.

The practical point is: payment records connect the account to a funding event. Follow the instrument and timing, then decide separately who paid and who operated the account.