What Is Coordinated Inauthentic Behavior (CIB)? - FeedGuardians Glossary
SecurityGlossary Term

Coordinated Inauthentic Behavior (CIB)

Coordinated Inauthentic Behavior (CIB) is Meta's term for networks of fake accounts working together to manipulate public discourse, deceive people about who is behind the activity, or artificially amplify content.

Definition

What Is Coordinated Inauthentic Behavior (CIB)?

Coordinated Inauthentic Behavior (CIB) is a term coined and formalized by Meta (Facebook/Instagram's parent company) to describe organized campaigns that use networks of fake or compromised accounts to manipulate public discourse. CIB goes beyond individual spam or trolling — it describes systematic, network-level deception where the key violation is the coordination and the fake identities, regardless of the content being shared. Meta publishes quarterly CIB enforcement reports detailing networks they have dismantled, which often involve state actors, political operatives, and commercial manipulation campaigns.

01

CIB vs Regular Spam

The distinction between CIB and regular spam is coordination and deception. A single bot account posting spam links is regular spam. A network of 500 accounts controlled by the same operator, posing as independent users, and working together to amplify a political narrative or attack a brand — that is CIB. The violation is not the content (which may even be factually accurate) but the coordinated deception about who is behind it.

02

CIB in Comment Sections

CIB manifests in comment sections as coordinated comment campaigns that appear grassroots but are actually directed by a single operator. This can target brands (coordinated negative campaigns to damage reputation), political figures (manufactured public opinion), or public health topics (coordinated misinformation). The comments are designed to look organic, making them harder to detect than obvious spam.

03

Detection

CIB detection requires network-level analysis — identifying groups of accounts that behave in coordinated ways. Signals include: accounts with similar creation dates, similar posting patterns, shared IP ranges, and synchronized activity timing. FeedGuardians' classifier watches for account-level coordination signals in addition to content-level classification.

Real-World

Examples of Coordinated Inauthentic Behavior (CIB)

01

Brand Attack Campaign

A competitor hires a social media manipulation firm that operates 200 fake accounts. The accounts leave coordinated negative reviews and comments on the target brand's Facebook Ads, appearing as independent dissatisfied customers but actually following a script from a single operator.

02

Meta CIB Takedown

Meta's quarterly CIB report reveals a network of 1,400 fake accounts originating from a single country, coordinated to amplify political messaging and attack opposition figures through comment flooding on news organization pages.

FAQ

Common Questions

CIB is Meta's formal term for network-level coordinated deception. Astroturfing is the broader concept of fake grassroots activity. CIB is specifically about coordinated networks of fake accounts; astroturfing can also include paid individuals using real accounts.

Yes. CIB campaigns frequently target brands — especially during product launches, controversies, or competitive battles. The coordinated negative comments appear organic, making them particularly damaging.

Use the standard reporting flow on Facebook or Instagram, selecting "fake account" or "coordinated harassment." For large-scale CIB campaigns, contact Meta's dedicated CIB reporting channel through your Meta Business Partner representative.

Ready to protect your
comments with AI?

Start your free trial and experience AI-powered comment moderation starting at $299/month.

Start Free Trial

7-day free trial