{ "docId": "019dd923-622c-750b-8b97-202fcba3bc0a", "docSlug": "4a1cd2416c13", "documentTitle": "Joyy Inc. (YY)", "authorId": "51_Muddy_Waters", "authorName": "Carson Block", "documentKindSlug": "research-note", "documentKindLabel": "Research note", "sourceTypeSlug": "short_seller", "sourceTypeLabel": "Short seller", "presentationDate": "2020-11-18 00:00:00", "orientation": "portrait", "aspectRatio": 0.77272725, "pageNumber": 28, "pageCount": 71, "prevPage": 27, "nextPage": 29, "slideType": "expose_contradiction", "function": "expose_contradiction", "density": "dense", "nDataPoints": 90, "notes": "The slide uses data from three specific IP addresses (59.45.170.206, 59.45.170.213, 59.45.170.216) to show consistent gifting patterns to the same performers.", "elementsJson": [ "paragraph", "data_table" ], "metadataConfidence": 1, "imagePath": null, "slideHref": "/slides/019dd923-622c-750b-8b97-202fcba3bc0a/28", "deckHref": "/decks/019dd923-622c-750b-8b97-202fcba3bc0a", "deckJsonHref": "/decks/019dd923-622c-750b-8b97-202fcba3bc0a.json", "deckAnchorHref": "/decks/019dd923-622c-750b-8b97-202fcba3bc0a#slide-28", "components": [ { "bbox": null, "kind": "callout", "text": "Near-Identical Gifts from Neighboring IPs to Same Performers Suggest These PUs Are FU Bots", "attrs": null, "subkind": null, "toolName": "Visual emphasis", "toolSlug": "visual-emphasis", "confidence": null, "componentId": "019dd953-0394-7243-be94-4a3a22cce776", "frameworkName": null, "frameworkSlug": null }, { "bbox": { "h": 0.085, "w": 0.764, "x": 0.118, "y": 0.093 }, "kind": "paragraph", "text": "This diversity of beneficiaries is compelling evidence that the gifting network was not operated by a single channel owner or small clique of channel owners, but by YY itself. As we see below, three of the IPs in this IP block made near-identical total contributions to the same performers, including Liu and performers Little BJ and Picasso. This activity is compelling evidence of non-human, programmed activity:", "attrs": null, "subkind": "paragraph", "toolName": null, "toolSlug": null, "confidence": null, "componentId": "08d48f7d-4333-4261-88c3-5c8a90b518d3", "frameworkName": null, "frameworkSlug": null }, { "bbox": { "h": 0.03, "w": 0.764, "x": 0.118, "y": 0.871 }, "kind": "paragraph", "text": "Our investigator drove up to a handful of small houses that sit in a residential compound in Guangzhou. These are the unassuming offices of a large YY channel owner. It was founded by an ex-YY employee", "attrs": null, "subkind": "paragraph", "toolName": null, "toolSlug": null, "confidence": null, "componentId": "1dacaeed-63e6-4fc1-b9aa-86a71d791063", "frameworkName": null, "frameworkSlug": null }, { "bbox": { "h": 0.015, "w": 0.565, "x": 0.118, "y": 0.785 }, "kind": "paragraph", "text": "A Channel Owner Illustrates the Interlocking Revenue Inflation Scheme with YY", "attrs": null, "subkind": "paragraph", "toolName": null, "toolSlug": null, "confidence": null, "componentId": "7a9757a1-aa91-4701-8910-402e3de90ff9", "frameworkName": null, "frameworkSlug": null }, { "bbox": { "h": 0.03, "w": 0.764, "x": 0.118, "y": 0.817 }, "kind": "paragraph", "text": "Our investigators learned that YY's revenue fraud is made possible by the fact that most top channel owners are explicitly or implicitly set up or heavily influenced by YY.", "attrs": null, "subkind": "paragraph", "toolName": null, "toolSlug": null, "confidence": null, "componentId": "df589bf8-d053-4e07-a0e8-bf08b72bffeb", "frameworkName": null, "frameworkSlug": null }, { "bbox": { "h": 0.145, "w": 0.416, "x": 0.292, "y": 0.197 }, "kind": "table", "text": "Gifts from IP: 59.45.170.206", "attrs": null, "subkind": "data", "toolName": null, "toolSlug": null, "confidence": null, "componentId": "249e7406-0e5e-4ba2-a2c2-955ef83d4d22", "frameworkName": null, "frameworkSlug": null }, { "bbox": { "h": 0.145, "w": 0.416, "x": 0.292, "y": 0.369 }, "kind": "table", "text": "Gifts from IP: 59.45.170.213", "attrs": null, "subkind": "data", "toolName": null, "toolSlug": null, "confidence": null, "componentId": "5971ca45-ed68-4c39-bcd6-2865519ef2e9", "frameworkName": null, "frameworkSlug": null }, { "bbox": { "h": 0.145, "w": 0.416, "x": 0.292, "y": 0.541 }, "kind": "table", "text": "Gifts from IP: 59.45.170.216", "attrs": null, "subkind": "data", "toolName": null, "toolSlug": null, "confidence": null, "componentId": "5bd35eab-c16d-4232-b24a-acf255ce8e84", "frameworkName": null, "frameworkSlug": null }, { "bbox": { "h": 0.015, "w": 0.694, "x": 0.153, "y": 0.733 }, "kind": "title", "text": "Near-Identical Gifts from Neighboring IPs to Same Performers Suggest These PUs Are FU Bots", "attrs": null, "subkind": "action-title", "toolName": null, "toolSlug": null, "confidence": null, "componentId": "def6c04d-c72f-4761-b15e-e783b1014b8b", "frameworkName": null, "frameworkSlug": null } ], "metrics": [], "tools": [], "frameworks": [ { "name": "fraud-exposure", "slug": null, "matchId": "de29ab8b-0d60-40e9-accf-2ac0ccfc4eff", "evidence": "The slide uses data patterns to expose fraudulent bot activity.", "confidence": 0.9 } ], "arcBeats": [ { "to": 71, "from": 4, "beatId": "a6d172fd-e615-4921-ab5f-acf82f61ca10", "arcName": "Overcoming the Monster", "arcSlug": "overcoming-monster", "beatName": "Expose Contradiction", "beatSlug": null, "evidence": "The report is filled with expose contradiction beats, revealing discrepancies in YY's reporting", "position": 0, "confidence": 0.8, "parentBeatName": null, "parentBeatSlug": null } ], "loops": [ { "to": 30, "from": 22, "name": "Iceberg", "slug": "10-iceberg", "bestFor": "Consulting, complex problem solving, organizational change", "matchId": "5dd2d118-3b65-4b5b-afa3-b8930b741eff", "evidence": "The report provides evidence of circular gifting and fake accounts", "position": 1, "objective": "What is the extent of YY's fraudulent practices?", "structure": "The Symptom (Visible) -> The System (Hidden) -> The Root Cause", "confidence": 0.7, "description": "Reveal that the visible problem is merely a symptom of a deeper root cause" } ], "imagePathAlt": null, "thumbSrc": null, "thumbSrcAlt": null, "locked": true }