How do I distinguish the account holder from the person using the website account?¶

The account holder is the recorded customer or owner. The user is whoever controlled the session that performed the relevant action. They may be different.

Separate contractual identity from activity¶

Account creation, billing, verification and recovery methods describe the customer relationship. Login time, authentication, source address, device details and audit events describe use.

A company may hold the account while employees use named profiles. A parent may pay for an account used by another household member. A developer may administer a client account, or stolen credentials may be used remotely.

It is similar to a registered vehicle and its driver: registration identifies responsibility for the vehicle relationship, not necessarily who drove during one journey.

Start with the precise action and timestamp. Determine which account and session performed it, which authentication was used and what device or network evidence exists. Then compare communications, work patterns, location and possession of the device.

Named subaccounts and role-based permissions improve attribution, while shared credentials weaken it. Account-holder knowledge, authority or benefit may still be relevant but should not be substituted for proof of use.