Two attacks on our partners this spring arrived from inside the victims’ own neighborhoods. These partners saw automated identity theft attacks in which applications came from IP addresses within a few miles of the victim’s home, often on the victim’s own internet provider. The mechanism is a residential proxy: web traffic routed through a stranger’s home internet connection, targetable down to the ZIP code and the internet provider.