https://www.fbi.gov/investigate/cyber/alerts/2026/evading-re...

> The following methods can be used to acquire residential IP addresses for a residential proxy network:

> Software development kit (SDK) partnerships: Proxy services convince mobile application developers to include their SDK in applications in exchange for payment for each person who downloads the application. Individuals download the application and accept the terms and conditions, allowing the SDKs to run in the background and route proxy traffic through users' devices.

> Virtual private network (VPNs) with hidden terms of service: Free VPN services may enroll users' devices in a residential proxy network, without obtaining their consent. The details are often hidden in the terms of service, which most users do not read prior to download, or the language is difficult for the user to understand.

> [malware and compromised IoT devices]

> Passive income schemes: Proxy services convince people to download applications on their device that promise to pay them for their internet bandwidth. People often do not realize that criminals use their internet connection to commit cyber attacks

One reddit post says bandwidth sharing passive income schemes paid them $1 to $9 per month.