What is the difference between a bot, a troll and a sock puppet?
They describe different things and are used interchangeably in a way that obscures what is actually happening.
A bot is an automated account run by software rather than a person in real time. Bots range from entirely benign — posting weather updates, earthquake alerts, automated news — to malicious, amplifying content, inflating follower counts, or spreading spam at volume. The defining feature is automation, not intent.
Detection is harder than people assume, and casual accusations are frequently wrong. Genuine people who post frequently, use similar phrasing to others in their community, or hold unpopular views are routinely labelled bots. Real indicators include implausible posting volume, perfectly regular timing, and content that ignores the conversation it replies to.
A troll is a person who posts deliberately provocative or disruptive content to elicit a reaction. The defining feature is intent to provoke, not automation. Original usage referred to provocation for amusement; it has broadened to cover most hostile online behaviour, which has diluted its usefulness.
Importantly, a troll is usually sincere in their disruption and insincere in their argument — they may not hold the view they are advancing. This is why arguing with one is unproductive: the goal was the reaction, and engagement is the reward.
A sock puppet is an additional account operated by someone who already has one, used to create a false impression of independent support. The defining feature is deception about identity — one person appearing to be several. Sock puppets are used to agree with oneself, evade a ban, manipulate votes, or attack a rival while appearing uninvolved.
A brigade is coordinated action by many real accounts. A troll farm is an organised operation employing people to do this at scale, which combines all three.
Why precision matters: "bot" has become a way to dismiss any opinion you dislike, which makes genuine inauthentic behaviour harder to discuss.