# How does Lalela tell a real AI agent from a fake one?

From How it works, “Verifying agents”:

> User-agent strings are easy to fake, so Lalela labels each visit with a confidence tier:
>
> - **Verified:** the request came from an IP range the operator publishes or a network registered to the operator, or carries a valid cryptographic signature (Web Bot Auth).
> - **Declared:** the user agent names a known agent, but nothing verifies it.
> - **Suspected:** the request doesn't name itself as an agent, but its behaviour points to automation, such as a browser user agent from a cloud provider's network.

Source: [https://lalela.dev/answers/verify/source](https://lalela.dev/answers/verify/source)