Ownership and Recovery Risks When Sourcing Ad Accounts

Editorial team Spend Ledger

An account is more than a login

An advertising account can look like a username, password and payment method, but control is usually spread across several pieces. The person who can sign in may not be the person or business the platform recognises as the account holder. A business container may own or administer the account. Recovery contacts may be able to regain access. A payment instrument may belong to someone else. These roles can overlap, but they are not interchangeable.

That distinction matters when an account is sourced from another party or managed through an agency. A seller may hand over credentials while retaining an email address, phone number, business-level role or other route to recover access. The buyer may be able to launch campaigns for a time without having durable control. Conversely, a buyer may receive access but lack the records or authority needed to prove to the platform that the account should belong to them.

Treat an ad account as a work tool with a documented chain of control, not as a transferable login by default. Before relying on an account, identify who holds each part of that chain and what the platform permits. Account structures, ownership rules and transfer procedures differ by platform, and some terms may prohibit transfers or restrict changes in control. The current rules should be checked on the platform’s own help and policy pages.

The account holder of record

The account holder of record is the person or business the platform associates with the account under its terms and account information. This may be the party that created the account, provided business details or accepted the applicable terms. A later change to the login credentials does not necessarily change that relationship.

In a sourced arrangement, ask which legal person or business is recorded as the holder, and whether the account was created for that holder’s own activity. Do not assume that an invoice, sale agreement or message from a seller changes the platform’s records. Those documents can help explain the commercial arrangement between parties, but the platform decides how its own account and business structures are recognised.

The practical risk is a mismatch. A buyer might pay for access, run campaigns and manage billing, while the platform still sees the seller or another business as the responsible holder. If a dispute, review or recovery request arises, the buyer may have difficulty showing authority. The seller may also remain responsible for activity associated with an account they no longer operate.

Before proceeding, establish what can actually be transferred or changed under the relevant platform rules. If the account is not eligible for a transfer, a private agreement cannot make an otherwise prohibited transfer acceptable. Consider using an authorised access arrangement or creating an account through a permitted route rather than treating a handover as a change of ownership.

The business container and its administrators

Many platforms organise advertising assets within a business-level container. That structure can include ad accounts, pages or other assets, with people assigned roles that govern what they can view or change. Access to an ad account alone may not give someone control of its broader business container. Likewise, control of a container can give an administrator authority over assets and permissions beyond a single campaign workspace.

A handover should therefore clarify where the ad account sits and who administers that structure. Ask whether the account is attached to the seller’s business, the buyer’s business or an agency’s business. Find out who can add or remove people, change access levels, move eligible assets or manage security settings. Confirm whether any other party still has administrative authority.

A role that permits campaign work is not necessarily a role that permits ownership changes or account recovery. Check the permissions shown in the platform and understand what each person can do. Avoid relying on vague descriptions such as “full access” unless they match the actual permissions available in the account.

If an agency provides access through its own business container, that may be a legitimate service arrangement, but it is not necessarily a sale of the account. The agency may retain ownership and control while granting the client permission to work within a defined scope. Put that distinction in writing: who owns the account, who controls the container, which party grants access, and what happens when the service ends. This reduces confusion without overriding platform rules.

Recovery contacts are control points

Recovery contacts are often overlooked during a handover. An email address, phone number or other recovery method may allow someone to reset credentials or respond to a security check. If a seller keeps a recovery route, the seller may be able to regain access even after providing a new password. The buyer may then lose access without warning or be drawn into a dispute over who is entitled to control the account.

A clean handover requires more than changing the visible login. Identify every contact and recovery method associated with the account and its business container. Determine who can access those inboxes or devices, who receives security notices, and whether any recovery information is shared with other accounts. Change or remove details only through the platform’s permitted settings and only when the person making the change has authority to do so.

Do not ask a seller to conceal their connection to the account, and do not try to defeat a recovery process. If the platform requires the original holder to remain involved, or does not allow the relevant details to be changed, treat that as a material limit on the arrangement. Use the platform’s official support channels to clarify the permitted options.

A seller retaining a recovery path is not merely a technical inconvenience. It may indicate that control has not genuinely moved, or that the account is being provided on a continuing-access basis. Make that arrangement explicit before spending money or running campaigns. If the parties cannot agree on who may recover the account and under what conditions, the account is not a dependable work asset.

Payment instruments and financial responsibility

The payment instrument attached to an account is another separate control point. It may belong to the account holder, a business, an agency or an individual who is not involved in day-to-day campaign management. The person who can change payment details may not be the person who controls the account, and the person paying charges may not be recognised as its owner.

Clarify who is responsible for advertising charges, taxes or other amounts the platform may apply, and who is authorised to add, remove or manage payment methods. Establish how billing records will be accessed and who will handle any charge questions. If a seller’s payment instrument remains attached, the seller may face charges for activity they do not control. If a buyer’s instrument is added to an account the buyer cannot recover, the buyer may face financial exposure without secure access.

Do not use another party’s payment details without permission, and do not assume that changing the payment method proves ownership. A payment record can help document who funded activity, but it does not necessarily establish the platform’s account holder of record. Keep billing responsibility and account authority aligned as far as the platform’s rules allow.

If payment details cannot be safely changed, or the person providing the account will not clarify responsibility, pause before using it. The platform’s current billing and account policies are the authority on supported payment arrangements. Avoid informal workarounds that obscure who is paying or who is responsible.

Proof of control and disputes

When the platform questions an account, it may ask for information that helps establish the relationship between the account, the business and the person seeking access. The details accepted can vary. A buyer who has only a password and a private sale record may not be able to demonstrate that they are authorised to act for the recorded holder. Even a genuine commercial transaction does not guarantee that the platform will recognise a change of control.

Keep a clear record of the arrangement from the start. This can include the parties’ legal or business identities, the account and business assets covered, the access being granted, who is responsible for billing, and any conditions or limits on the arrangement. Record when credentials and contact details are changed, who made each change, and which permissions remain with other parties. Store records securely and limit access to people who need them.

Records should be accurate and consistent with the platform account. Do not submit altered documents, claim a relationship that does not exist or present an access permission as ownership. If the platform asks for verification, respond through its official process with truthful information. If the evidence is incomplete, explain the situation rather than trying to manufacture proof.

The original holder may also ask to recover the account. They might claim the account was loaned, provided for agency work or never sold in a way the platform recognises. A written agreement may help resolve the parties’ private dispute, but it does not guarantee that the platform will grant access to the buyer. Avoid retaliatory actions such as locking out a legitimate holder or making unsupported ownership claims. Follow the platform’s dispute and support procedures, and get appropriate legal advice where the commercial agreement is contested.

A practical handover routine

A handover should be planned as a controlled process, not improvised while campaigns are running. First, confirm that the proposed arrangement is allowed by the platform. Identify the account holder of record, the business container, all administrators, recovery contacts and the payment instrument. If any role is unclear, resolve that before relying on the account.

Next, agree in writing what is being provided. Distinguish between ownership, administrative access, campaign permissions and agency services. State which party is responsible for billing, security and support requests, and what happens if access ends or a platform review begins. The agreement should not promise an outcome the platform controls.

Then complete only the changes the platform permits. Where authorised, update credentials and recovery contacts using the platform’s own settings, review the people and roles with access, and remove access that is no longer needed. Confirm that security notices reach the responsible party. Check the payment arrangement separately, and make sure the person responsible for charges can review the relevant billing information.

Finally, record the result. Keep a simple handover note listing each asset or account in scope, who holds it, who can administer it, who can recover it, who pays, and when the arrangement was reviewed. Record unresolved limitations rather than describing the transfer as complete when it is not. Do not share credentials more broadly than necessary; use platform-provided access controls where available.

If the platform does not permit a required change, stop and reassess the arrangement. Do not try to bypass the limitation by hiding the seller’s role, misrepresenting the holder or creating a recovery path that defeats platform controls. Use official support or appeal channels to ask what options are available.

Assessing whether the arrangement is workable

The economics of a sourced account should include the cost of uncertainty, not just the upfront payment or the convenience of immediate access. A low-friction handover can still create operational risk if the seller retains recovery access, the buyer cannot prove authority, billing responsibility is unclear or the platform may not recognise the transfer. A team should weigh those risks against a permitted account setup it controls directly.

Consider how disruption would affect campaign planning, reporting and payment reconciliation. If losing access would interrupt essential work, an account with unresolved ownership or recovery questions is a weak foundation. Distributing work across accounts does not remove the underlying issue if each account has unclear control, and it must never be used to get around a restriction or enforcement action.

A sound decision rests on transparent control. The account holder, business container, recovery contacts and payment responsibility should be identified and consistent with the platform’s rules. Any agency arrangement should state who controls the account and what access the client receives. Any sourced account should be treated cautiously unless the platform permits the arrangement and the parties can document it accurately.

When those conditions cannot be met, the practical answer may be to decline the arrangement and use a compliant route to establish access. That does not guarantee approval or uninterrupted service; platform decisions remain with the platform. It does reduce avoidable ambiguity and gives the team a clearer basis for managing its advertising work.