The root cause is usually automated detection of abnormal or non-natural behavior (patterns, fingerprints, activity frequency, account linking), not the proxy; once risk signals cross a threshold, the system automatically restricts or blocks the account.