Why Creator Stats Can't Be Trusted Without Cryptographic Verification

The API wall: what platforms actually expose

When a brand wants to evaluate a creator before commissioning a campaign, the obvious question is: how do we verify their audience quality? Follower counts are visible, sure — but they're also easily inflated. What really matters is reach, impressions, audience demographics, and engagement rate. These are the numbers that predict whether a partnership will convert.

The problem is that Instagram's official API deliberately limits what it exposes to third parties. Public endpoints return profile info, post counts, and aggregate public engagement — nothing close to the granular Insights panel that only the account owner sees inside Instagram. That detailed data is intentionally siloed to protect user privacy and maintain platform control over the data economy.

This creates a verification gap. A creator can see their own detailed stats inside the app — but they have no official, trustworthy way to share those stats with an external party. The data exists; it just can't be extracted without either trusting a screenshot or building a dedicated OAuth flow — which Instagram still limits to approved business partners.

Screenshots: the old workaround, now dangerously unreliable

For years, the industry standard was to ask creators for a screenshot of their Instagram Insights. It was imperfect — anyone with Photoshop could edit the numbers — but in practice, obvious forgeries were rare and the social cost of getting caught was high enough to keep most creators honest.

That calculus has changed completely. Modern generative AI tools can produce a pixel-perfect, convincing mock-up of an Instagram Insights panel in under 30 seconds. Image editing models have reached a quality level where a forensic analyst would struggle to spot the forgery, let alone a brand manager quickly reviewing a media kit.

“In the age of AI image generation, a screenshot of a stats panel is as trustworthy as a handwritten note claiming you have a million followers.”

The stakes are high. Creator marketing is a multi-billion dollar industry. Brands allocate serious budget based on reach and audience quality. A fraudulent media kit showing inflated stats — demographics skewed toward high-CPM markets, engagement rates padded — can result in campaigns with near-zero ROI and contractual disputes. The market needs a better standard of proof.

Why the standard needs to be cryptographic

The solution isn't to trust the creator, or the platform, or a middleman. The solution is to make trust unnecessary — by replacing it with mathematical proof.

This is exactly what zero-knowledge proofs over TLS (zkTLS) enable. When a creator logs into Instagram and loads their Insights page, that data is transmitted to their browser over an encrypted TLS connection. A zkTLS notary can witness this connection and generate a cryptographic proof that attests to the specific values the server returned — without ever seeing the creator's credentials, and without the creator having to share raw data.

The result is a proof that is:

• Tamper-proof — any modification invalidates the proof
• Privacy-preserving — credentials never leave the creator's device
• Platform-independent — works against any HTTPS data source
• Verifiable by anyone — the proof can be checked without trusting either party

AudienceCheck: the verification layer the creator economy was missing

AudienceCheck is built on exactly this principle. A creator enters their Instagram handle, gets redirected to a vouch verification flow powered by vlayer's zkTLS infrastructure, and receives a shareable proof — a link that contains cryptographically verified stats that cannot be altered or forged.

The creator never gives up their password. The brand never has to guess whether the numbers are real. The gap between “what the platform knows” and “what a third party can trust” is closed — not by asking nicely, but by math.