Cloud phones are virtualized Android instances running on remote servers, while real devices are genuine physical handsets. Real devices survive platform detection because they pass device attestation, the check that asks whether a device is a genuine, untampered physical phone. Cloud phones fail this check because they are not physical phones. For multi-account social media distribution, this single check is often the difference between accounts that operate for years and accounts that get banned in weeks.
What Is a Cloud Phone?
A cloud phone is a virtualized Android environment hosted on server hardware and accessed remotely. The operator sees a phone screen and interacts with it like a real device, but there is no physical handset. The "phone" is a software instance running alongside many others on shared server infrastructure. GeeLark, Redfinger, and similar platforms provide these environments as a service.
Structurally, a cloud phone is a virtual machine. It may run on ARM-based server hardware to approximate mobile architecture. It may randomize device identifiers and simulate GPS and SIM data. But it is, at its core, software running on a server, not a physical phone in a real hand.
What Is a Real Device?
A real device is a genuine physical phone: a Samsung, iPhone, Pixel, or equivalent handset with a real IMEI, real sensor suite, real carrier connection, and real hardware identity. Each device is one piece of hardware that exists in the physical world. There is no virtualization layer between the operating system and the hardware because the operating system runs directly on the hardware.
For multi-account distribution, a real device farm provisions one handset per account. Each device has its own carrier SIM, its own IP address from a mobile network, and its own physical location. Ten accounts run on ten different physical phones in ten different hands.
The Device Attestation Check
The technical mechanism that separates cloud phones from real devices is device attestation. Platforms like TikTok, Instagram, and Snapchat run attestation routines that check whether the device is genuine hardware. OWASP's Mobile Application Security Testing Guide documents emulator and VM detection as a standard test, covering virtualization artifacts, hardware characteristics, and sensor behavior.
Device attestation asks: does this device have physical sensors that produce the data distribution of a real phone? Does the hardware fingerprint match a known genuine device model? Does the network connection come from a mobile carrier or a data center? Cloud phones fail one or more of these checks. Real devices pass them all.
Detection Outcomes
Meta removes over one billion fake accounts every quarter. A percentage of those detections come from device attestation alone: an account logging in from a virtualized environment triggers automated flagging before the account has even posted.
Cloud phone accounts operate on borrowed time. A detection model update that catches the specific virtualization signature of a cloud phone provider bans every account on that provider in one sweep. Real device accounts have no virtualization signature to catch, because there is no virtualization.
The Operational Tradeoff
Cloud phones are easier to operate. They require no hardware purchases, no physical storage, no charging, no SIM management, and no device maintenance. They can be provisioned instantly and accessed from anywhere. For small-scale operations or short-duration campaigns, the operational convenience can outweigh the detection risk.
Real devices require physical infrastructure. Handsets must be purchased, stored, charged, maintained, and managed. The overhead scales linearly with the number of accounts. But the detection survival curve also scales with hardware investment: the accounts survive because the infrastructure is real.
How Conbersa Runs Real Device Infrastructure
Conbersa runs on real physical devices exclusively. We do not use cloud phones because we have seen the detection outcomes in production. The pattern is consistent: cloud phone accounts work until a detection update catches the provider's virtualization signature, at which point the entire portfolio is wiped. Real device accounts survive those detection updates because there is no virtualization signature to catch.