{
  "docId": "019dd923-622c-750b-8b97-202fcba3bc0a",
  "docSlug": "4a1cd2416c13",
  "documentTitle": "Joyy Inc. (YY)",
  "authorId": "51_Muddy_Waters",
  "authorName": "Carson Block",
  "documentKindSlug": "research-note",
  "documentKindLabel": "Research note",
  "sourceTypeSlug": "short_seller",
  "sourceTypeLabel": "Short seller",
  "presentationDate": "2020-11-18 00:00:00",
  "orientation": "portrait",
  "aspectRatio": 0.77272725,
  "pageNumber": 30,
  "pageCount": 71,
  "prevPage": 29,
  "nextPage": 31,
  "slideType": "expose_contradiction",
  "function": "expose_contradiction",
  "density": "overcrowded",
  "nDataPoints": 33,
  "notes": "Includes a table of top 11 channel owners and a case study on 'Killing Time' (Dafashijian) bot activity.",
  "elementsJson": [
    "data_table",
    "paragraph",
    "footnote"
  ],
  "metadataConfidence": 1,
  "imagePath": null,
  "slideHref": "/slides/019dd923-622c-750b-8b97-202fcba3bc0a/30",
  "deckHref": "/decks/019dd923-622c-750b-8b97-202fcba3bc0a",
  "deckJsonHref": "/decks/019dd923-622c-750b-8b97-202fcba3bc0a.json",
  "deckAnchorHref": "/decks/019dd923-622c-750b-8b97-202fcba3bc0a#slide-30",
  "components": [
    {
      "bbox": null,
      "kind": "callout",
      "text": "Using the previously discussed methodology for identifying YY-controlled channel owners by tracing shared, YY-linked IMEIs, we believe it very likely that 500 additional channel owners are also controlled by YY.",
      "attrs": null,
      "subkind": null,
      "toolName": "Visual emphasis",
      "toolSlug": "visual-emphasis",
      "confidence": null,
      "componentId": "019dd953-0394-7243-be95-84026932e692",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": null,
      "kind": "metric",
      "text": "Gift Income: 1,186,176,720",
      "attrs": null,
      "subkind": "primary",
      "toolName": "Quantification",
      "toolSlug": "quantification",
      "confidence": null,
      "componentId": "019dd953-0394-7243-be95-8e71210bd318",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.06,
        "w": 0.78,
        "x": 0.11,
        "y": 0.48
      },
      "kind": "paragraph",
      "text": "The cozy YY-channel owner relationship handily enables revenue fraud. Through our data collection activities, we were able to use Top PUs' IPs to identify widespread FU Bot contributions.",
      "attrs": null,
      "subkind": "paragraph",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "519f2dbf-ee32-4fb1-92ef-6e7a26338d71",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.08,
        "w": 0.78,
        "x": 0.11,
        "y": 0.55
      },
      "kind": "paragraph",
      "text": "We found PUs' ties to YY when they exposed internal IP addresses in their website logs. These PUs were either connected to the local host server IP (127.0.0.1) or to YY's local networks (100.64.0.0/.10).",
      "attrs": null,
      "subkind": "paragraph",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "9c0ea73e-f11f-4beb-be82-b70b2d28f135",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.06,
        "w": 0.78,
        "x": 0.11,
        "y": 0.76
      },
      "kind": "paragraph",
      "text": "Killing Time ranked the #4 PU over our four-month monitoring period, with RMB 9.7 million in gifts. He was also involved with two top YY channel owners, Bluerain and Qiling, for more than 8 years.",
      "attrs": null,
      "subkind": "paragraph",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "a0c0f1c9-8385-4419-b97c-4e9ad278703b",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.04,
        "w": 0.78,
        "x": 0.11,
        "y": 0.71
      },
      "kind": "paragraph",
      "text": "Killing Time is an apparently well-known Top PU who also has managerial sway in the YY ecosystem. We found that his account demonstrated FU Bot activity.",
      "attrs": null,
      "subkind": "paragraph",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "a7cd85ee-df47-456d-9349-1178e78df952",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.06,
        "w": 0.78,
        "x": 0.11,
        "y": 0.35
      },
      "kind": "paragraph",
      "text": "Using the previously discussed methodology for identifying YY-controlled channel owners by tracing shared, YY-linked IMEIs, we believe it very likely that 500 additional channel owners are also controlled by YY.",
      "attrs": null,
      "subkind": "paragraph",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "f398f24e-e8e4-45ad-b692-61b62a457861",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": null,
      "kind": "quote",
      "text": "As indicated in the film “People’s Republic of Desire.” — Footnote 42",
      "attrs": null,
      "subkind": null,
      "toolName": "Authority citation",
      "toolSlug": "authority-citation",
      "confidence": null,
      "componentId": "019dd953-0394-7243-be95-89935439aaf7",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.06,
        "w": 0.78,
        "x": 0.11,
        "y": 0.83
      },
      "kind": "source-note",
      "text": "41 In this report, fake users presenting the local host server IP (127.0.0.1) in the transaction logs are referred to as YY Server FUs and the paying users presenting YY's local network IP addresses (100.64.0.0/.10) are referred to as YY Internal Network FUs",
      "attrs": null,
      "subkind": null,
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "c37749d7-c948-4bdb-bbcf-299e1c45c325",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.18,
        "w": 0.36,
        "x": 0.32,
        "y": 0.08
      },
      "kind": "table",
      "text": "Table of top 11 channel owners with gift income and percentage share.",
      "attrs": null,
      "subkind": "data",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "4e3418a9-f4ff-494b-b566-8e9bb67166b8",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.03,
        "w": 0.78,
        "x": 0.11,
        "y": 0.67
      },
      "kind": "title",
      "text": "Case Study: FU Bot Activity for Dafashijian, or “Killing Time” (打发时间)",
      "attrs": null,
      "subkind": "headline",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "134fb063-5d30-4e9a-bc72-29448ae55999",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.03,
        "w": 0.78,
        "x": 0.11,
        "y": 0.44
      },
      "kind": "title",
      "text": "Time to Upgrade the FraudTech: Slip-Ups Reveal YY-Controlled Gifting",
      "attrs": null,
      "subkind": "headline",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "e19c0351-a8b0-493f-90ae-d4e1a5d5dfce",
      "frameworkName": null,
      "frameworkSlug": null
    }
  ],
  "metrics": [],
  "tools": [],
  "frameworks": [
    {
      "name": "fraud-exposure",
      "slug": null,
      "matchId": "48b98884-e989-4db3-ae4a-f9096ad564c8",
      "evidence": "Methodology for identifying YY-controlled channel owners and bot activity.",
      "confidence": 0.9
    }
  ],
  "arcBeats": [
    {
      "to": 71,
      "from": 4,
      "beatId": "a6d172fd-e615-4921-ab5f-acf82f61ca10",
      "arcName": "Overcoming the Monster",
      "arcSlug": "overcoming-monster",
      "beatName": "Expose Contradiction",
      "beatSlug": null,
      "evidence": "The report is filled with expose contradiction beats, revealing discrepancies in YY's reporting",
      "position": 0,
      "confidence": 0.8,
      "parentBeatName": null,
      "parentBeatSlug": null
    }
  ],
  "loops": [
    {
      "to": 30,
      "from": 22,
      "name": "Iceberg",
      "slug": "10-iceberg",
      "bestFor": "Consulting, complex problem solving, organizational change",
      "matchId": "5dd2d118-3b65-4b5b-afa3-b8930b741eff",
      "evidence": "The report provides evidence of circular gifting and fake accounts",
      "position": 1,
      "objective": "What is the extent of YY's fraudulent practices?",
      "structure": "The Symptom (Visible) -> The System (Hidden) -> The Root Cause",
      "confidence": 0.7,
      "description": "Reveal that the visible problem is merely a symptom of a deeper root cause"
    }
  ],
  "imagePathAlt": null,
  "thumbSrc": null,
  "thumbSrcAlt": null,
  "locked": true
}