- Joined
- Jan 20, 2026
- Messages
- 345
- Reaction score
- 2,345
Infrawatch has discovered a market where mobile networks are becoming a commodity for those who want to hide their tracks.
In early 2026, the Infrawatch team studied the SIM farm-as-a-service market and discovered a large physical infrastructure. These weren't virtual nodes, but rather racks of real smartphones and 4G/5G modems connected to mobile networks in various countries.
Experts found 87 open ProxySmart control panels in 17 countries. They are linked to at least 24 commercial proxy providers and 35 mobile operators. The overall network includes at least 94 physical sites in North America, Europe, and South America. In the US, such farms were discovered in 19 states.
SIM farms are used to sell mobile proxies. This type of traffic is more difficult to block because mobile operators often assign a single IP address to multiple clients, and when reconnecting, the address can quickly change. As a result, this type of infrastructure is suitable for bypassing restrictions, mass account registration, and automating social media activity.
ProxySmart, according to Infrawatch, has become a common platform for many such operators. The system allows for device management, IP address changes, client onboarding, tariff setup, and payment acceptance. Thanks to this ready-made toolkit, launching a SIM farm is no longer a complex engineering task but a commercial service.
Lax customer verification is a particular concern. According to Infrawatch, many providers implement almost no KYC procedures, and some directly advertise access without identity verification. A number of services target international audiences and promote American mobile proxies as a way to bypass regional restrictions.
ProxySmart's technical features further enhance protection against abuse. The platform supports remote device management, rapid IP redirection, and network fingerprinting, allowing traffic to mimic connections from different operating systems. Within a single farm, providers often use SIM cards from multiple carriers, expanding the address pool and reducing the risk of blocking.
Similar schemes have already come to the attention of law enforcement agencies. In 2025, telecom infrastructure containing hundreds of SIM servers and 100,000 SIM cards was dismantled in New York City , and in Latvia, with the support of Europol, 1,200 SIM boxes and 40,000 active SIM cards were seized.
Infrawatch believes that such platforms lower the barrier to entry for mobile proxy operators and facilitate scalable abuse. The combination of real mobile networks, rapid IP changes, and weak client controls makes SIM farms a convenient infrastructure for fraud, bots, and bypassing security systems.
In early 2026, the Infrawatch team studied the SIM farm-as-a-service market and discovered a large physical infrastructure. These weren't virtual nodes, but rather racks of real smartphones and 4G/5G modems connected to mobile networks in various countries.
Experts found 87 open ProxySmart control panels in 17 countries. They are linked to at least 24 commercial proxy providers and 35 mobile operators. The overall network includes at least 94 physical sites in North America, Europe, and South America. In the US, such farms were discovered in 19 states.
SIM farms are used to sell mobile proxies. This type of traffic is more difficult to block because mobile operators often assign a single IP address to multiple clients, and when reconnecting, the address can quickly change. As a result, this type of infrastructure is suitable for bypassing restrictions, mass account registration, and automating social media activity.
ProxySmart, according to Infrawatch, has become a common platform for many such operators. The system allows for device management, IP address changes, client onboarding, tariff setup, and payment acceptance. Thanks to this ready-made toolkit, launching a SIM farm is no longer a complex engineering task but a commercial service.
Lax customer verification is a particular concern. According to Infrawatch, many providers implement almost no KYC procedures, and some directly advertise access without identity verification. A number of services target international audiences and promote American mobile proxies as a way to bypass regional restrictions.
ProxySmart's technical features further enhance protection against abuse. The platform supports remote device management, rapid IP redirection, and network fingerprinting, allowing traffic to mimic connections from different operating systems. Within a single farm, providers often use SIM cards from multiple carriers, expanding the address pool and reducing the risk of blocking.
Similar schemes have already come to the attention of law enforcement agencies. In 2025, telecom infrastructure containing hundreds of SIM servers and 100,000 SIM cards was dismantled in New York City , and in Latvia, with the support of Europol, 1,200 SIM boxes and 40,000 active SIM cards were seized.
Infrawatch believes that such platforms lower the barrier to entry for mobile proxy operators and facilitate scalable abuse. The combination of real mobile networks, rapid IP changes, and weak client controls makes SIM farms a convenient infrastructure for fraud, bots, and bypassing security systems.
