A limited-release product goes on sale. The API supports: browse inventory → add to cart → enter payment → confirm order. A bot operator prepares hundreds of accounts with saved payment methods, logged-in sessions, and pre-selected sizes. The moment inventory becomes available, the bot sends hundreds of simultaneous checkout requests.
Human users — clicking through the flow manually — complete checkout in 3–5 minutes. The bot completes it in under a second. By the time the first human user clicks “Add to Cart,” all available inventory is either purchased or held in active bot carts.
Even if the bot can’t complete checkout instantly, holding inventory in a cart blocks it from other buyers. If there’s no cart timeout (or a long one), a bot can reserve inventory indefinitely without purchasing it — then decide whether to complete the purchase or let it expire and re-acquire it from another session.
Per-account purchase limits (max 2 tickets per verified account), short cart timeouts (items released after 10 minutes if checkout isn’t completed), queue fairness systems (randomized order instead of first-come-first-served), and device fingerprinting to detect parallel sessions from the same operator.