Using multiple accounts for free trials is generally not illegal in the criminal sense, but it does break the service’s Terms of Service, which courts treat as a binding contract. For most people signing up with a second email address, the realistic consequence is an account ban and possibly a blacklisted payment method, not a courtroom. The picture changes sharply if you use fake identities, someone else’s credit card, or stolen personal information to pull it off. Those methods can trigger federal wire fraud and identity theft statutes carrying prison sentences of up to 20 years.
Breaking the Terms Is a Civil Matter
When you click “I Agree” during signup, you’re entering a contract. Nearly every major subscription service prohibits more than one account per person, and some extend that to one account per household or payment method. Creating duplicate trial accounts is a breach of that contract.
The standard remedy for a breach is money damages measured by what the company lost: the subscription fees you avoided. In theory a company can sue you for that amount. In practice, suing an individual over a few months of avoided fees almost never makes financial sense, so the right exists mostly on paper for ordinary users.
Where larger-scale abuse is involved, companies can also pursue unjust enrichment, which measures recovery by the value of what you took minus any legitimate expenses. That theory becomes relevant when someone is extracting real profit from the misuse, not when someone watched an extra month of streaming.
What Companies Actually Do When They Catch You
The response almost always follows the same pattern. The company terminates every account it has linked to you, including your original if you had one. It may blacklist the device, IP address, and payment cards tied to those accounts, which can make it hard to come back later even as a legitimate paying customer. For the overwhelming majority of cases, that is where it ends.
Civil lawsuits over individual trial abuse are rare. Criminal referrals are rarer, reserved for cases involving large-scale fraud rings, identity theft, or significant losses. A company that believes criminal activity occurred can report the matter to the FBI, a state attorney general, or local law enforcement for investigation.1Department of Justice. Report Fraud
When It Becomes a Crime
Signing up with a second email address on your own name and your own card is unlikely to interest a prosecutor. The methods people sometimes use to avoid detection are a different matter, because those methods can violate federal criminal law on their own.
Wire Fraud
Federal wire fraud law makes it a crime to use electronic communications to carry out a scheme to defraud someone of money or property through false representations. The maximum penalty is 20 years in prison, a fine, or both.2Office of the Law Revision Counsel. 18 USC 1343 – Fraud by Wire, Radio, or Television Fabricating identities to systematically obtain services you know you’re not entitled to can meet the elements: a scheme, false representations that you’re a new customer, and the internet used to execute it.
Prosecutors have wide discretion here. Someone who made two Gmail accounts to extend a streaming trial is not a realistic target. Someone running an operation that generates hundreds of accounts to resell access, or that exploits high-value enterprise trials with fake identities, is. The statute doesn’t draw that line, but enforcement does.
Identity Theft
Using another person’s name, address, credit card number, or other identifying information to create accounts is identity theft, no matter how trivial the service. The aggravated identity theft statute adds a mandatory two-year prison sentence on top of whatever penalty the underlying offense carries, and courts cannot reduce that time or let it run concurrently.3Office of the Law Revision Counsel. 18 USC 1028A – Aggravated Identity Theft For terrorism-related identity theft, the mandatory add-on is five years. Probation is not available.
This is where “just getting a free trial” can turn into life-altering consequences. Even borrowing a friend’s credit card with informal permission can create problems, because the Terms of Service typically require that the account holder be the cardholder.
The CFAA Usually Doesn’t Reach This
The Computer Fraud and Abuse Act makes it a crime to access a computer “without authorization” or to “exceed authorized access.”4Office of the Law Revision Counsel. 18 USC 1030 – Fraud and Related Activity in Connection With Computers For years, prosecutors argued that violating a site’s Terms of Service was itself exceeding authorized access, which would have turned every ToS breach into a potential federal crime.
The Supreme Court rejected that reading in 2021. In Van Buren v. United States, the Court held that someone exceeds authorized access only by reaching areas of a system that are off-limits entirely, like specific files or databases they were never permitted to see. Using an authorized system for an unauthorized purpose does not count.5Supreme Court of the United States. Van Buren v. United States, 593 U.S. 374 (2021)
Signing up through a public registration page with a new email address isn’t reaching a restricted part of anyone’s system. The CFAA is more likely to apply when someone exploits a software vulnerability, bypasses technical access controls, or breaks into an admin panel.
How Companies Detect Duplicate Accounts
Clearing cookies or using a new email address is often not enough. Detection has gotten sophisticated.
- Device fingerprinting combines browser type, screen resolution, installed fonts, operating system version, and other attributes into a unique identifier that persists through cookie clearing and browser switches.
- IP address monitoring flags multiple signups from the same address, and some services analyze IP reputation to catch VPNs and proxy networks.
- Email pattern detection flags disposable email providers and obvious Gmail variants that add dots or plus signs.
- Payment card matching tracks card numbers across signups, and some services block prepaid or virtual cards outright.
Some services now use machine learning to spot behavioral patterns, including how you navigate the interface, what you access first, and when you use the service. Getting caught usually means losing every linked account permanently, along with any paid content or history attached to them.
Credit and Collection Risk
If a service decides you owe money, whether from a trial that converted to a paid subscription or from accounts it considers fraudulent, that balance can land with a collection agency. A collection account can stay on your credit report for up to seven years. Payment history accounts for roughly 35% of your credit score, so damage can follow you into loan, credit card, and apartment applications long after you’ve forgotten about the trial.
Ignoring a collector can lead to a lawsuit. A judgment can mean wage garnishment or funds taken from your bank account, depending on state law. The dollar amounts in trial disputes are usually small, but the collection process doesn’t scale its aggressiveness to the size of the balance.
If the Company Broke the Rules First
Before working around a charge, check whether you actually owe it. The FTC’s Negative Option Rule, which took effect in 2025, requires companies offering free trials that convert to paid subscriptions to disclose pricing clearly before collecting payment, tell you when charges begin, give you each deadline to cancel, and make cancellation at least as easy as signup. If you enrolled online, online cancellation has to be available.6Federal Register. Negative Option Rule More than 30 states and the District of Columbia have their own automatic renewal laws with similar or additional requirements, including affirmative consent before charges and the right to cancel before the first charge.
If a company didn’t follow these rules when you signed up, you may have grounds to dispute the charge. Disputing through legitimate channels is a better path than creating a second account to dodge a bill you might not legally owe in the first place.