Until they follow/friend an account to enter a contest, follow harrystylesfans, some influencer who's account is managed by an agency, or "sign in with <social>

Until they follow/friend an account to enter a contest, follow harrystylesfans, some influencer who's account is managed by an agency, or "sign in with <social>" somewhere and give too much access. It's a pretty large attack surface that can be subject to a lot of very cheap automation.