Systems, methods, and non-transitory computer readable media are configured to determine an account through which illegitimate activity has been conducted on an online service. A plurality of computing devices from which the account was accessed are determined. At least a first computing device of the plurality of computing devices is blocked from creating a new account with the online service.