search facebook twitter LinkedIn instagram
EN / ES
C.A.R.A. Logo

C.A.R.A.

Cohesion & Amplification Risk Assessment

45 days. 6 accounts. Instagram. What the system does when nobody is looking.

A neutral fitness account with no gender signal sustained polarising content for three consecutive weeks, without searching for it, without following anyone, without posting anything.

A new account reached Level 4 content, explicit hostility, dehumanising narratives, on Day 1.

A 294-fold difference in audience size produced the inverse risk pattern.

The risk is not in the content, it is in the architecture.

C.A.R.A. is a field study built to observe what recommendation systems move accounts toward progressively higher-intensity identity content, without the user searching for it, without prior history, without anyone outside noticing.


The Problem

What regulation is missing

EU platform oversight has advanced significantly through the DSA and the AI Act. But current frameworks focus on content categories, user behaviour, and system function. They are less equipped to observe how recommender systems build exposure pathways over time.

In identity-sensitive ecosystems, the risk is not only the presence of a harmful item. It is the sequence through which the system makes certain content increasingly likely for a user, and that sequence is invisible to the user, to the researcher, and to the regulator.

Why it matters

The consequences of that sequence are no longer hypothetical.

In March 2026, Osmar, a 15-year-old student in Lázaro Cárdenas, Michoacán, killed two female teachers at his school. Nine hours before the attack, he posted a series of Stories on his Instagram account, the same platform this study examines, referencing incel ideology and explicit hostility toward feminism and women. He had received, consumed, and amplified that content through Instagram's recommendation architecture. In September 2025, a student with documented incel affiliations killed a classmate at UNAM's CCH Sur campus in Mexico City, having previously posted hate messages linked to the same online communities. These are not isolated incidents. They are the visible end of trajectories that begin with content that is individually legal, algorithmically recommended, and structurally invisible to any regulator.

The opacity problem, and what C.A.R.A. does about it

Recommendation platforms do not share their internal data with external researchers. That opacity is not a technical limitation: it is the design. A system that structures the identity exposure of hundreds of millions of people and cannot be audited from the outside is a structural regulatory problem.

C.A.R.A. was built to hack that opacity: to take the only observable layer, the user's feed, and turn it into measurable, replicable indicators connected to existing legal obligations. We did not ask Instagram for anything. We did not need to.


We did not study what the platform says it does. We studied what the user lives.


The Study

Instagram field study, 10 March - 21 April 2026. Seven observation sessions, one per week. Six accounts observed under controlled protocol conditions. 420 items classified. Inter-coder reliability: Cohen's kappa = 0.68 (substantial); global agreement 90.2%.

Two independent observers classified the same content separately, without consulting each other. When their results were compared, they agreed on 379 of the 420 items, 90.2% of cases. The remaining disagreements were adjudicated by the principal investigator following the pre-established protocol. Cohen’s kappa (κ=0.68) measures whether that agreement is real or could be explained by chance: the scale runs from 0 (purely random agreement) to 1 (perfect coincidence). Above 0.60 is considered substantial agreement in social sciences and is the standard threshold for peer-reviewed academic publication. C.A.R.A. exceeds it.

Six accounts. Three new, created from scratch with distinct entry profiles: fitness and productivity, positive masculinity, leadership and personal discipline. Three existing, with real platform history inside the IDMAH ecosystem. Three entry points.

Account Type Entry point Role in the study
A — Prosocial New Positive masculinity psychology. Followed wellness, mental health, constructive masculinity content. Does the system protect prosocial entry?
B — Neutral New Fitness and productivity only. No gender signal, no masculinity marker, no identity cue of any kind. The key test: does a genuinely neutral entry stay neutral?
C — Traditional New Leadership and personal discipline. No extremist content. Entry with gender signal but no polarising content.
D — @demachosahombres Existing >475K followers. 8 years of platform history. Prosocial masculinity ecosystem. Large-scale reference observatory.
E — Retiro para Hombres Existing ~1,600 followers. Same ecosystem, small scale. Small-scale observatory. Scale vs. risk comparison.
F — MIRACLE Existing ~1,700 followers. Third ecosystem account. Comparative range.
What neutral really means

What "neutral" really means

Account B did not enter looking for masculinity, politics, gender conflict, or the manosphere. It entered from apparently innocuous content: fitness, productivity, personal performance. That is precisely what makes it the most important account in the study: it allows us to observe whether the system moves genuinely non-ideologised profiles toward higher-intensity identity content.

This matters because it is precisely how the manosphere operates. The manosphere is not a separate space that exists outside platforms and then migrates into them. It is the path that the recommendation architecture builds: a chain of algorithmic connections that, step by step, links fitness to discipline, discipline to male identity, male identity to grievance, and grievance to explicit hostility.

There is no “manosphere destination” waiting at the end, the path of progressively more extreme recommendations is the manosphere. The system does not need an external actor to push users toward that content. It produces the pathway on its own. C.A.R.A. makes that pathway observable and measurable from within the real ecosystem, without access to the platform’s internal data, but operating exactly as any real user would.

The five-level intensity scale

Level Name What it contains
1 Self-care / No signal No masculinity or gender identity signal. Generic wellbeing, sport, humour.
2 Light identity Gender framing present but no confrontation or group adversary.
3 Polarising narrative Identity opposition, collective grievance, us-vs-them logic. No violence required.
4 Explicit hostility Active exclusion or dehumanisation on the basis of gender. Red pill, MGTOW, dominance narratives.
5 Extremism Content that legitimises or glorifies violence, supremacism or radicalization by gender.

Level 4 is not simply "controversial content". It is the threshold at which content promotes active exclusion or dehumanisation. What this study documented is not that this content exists on Instagram, that was already known. It is that the system can move new accounts to that level in days, without the user having searched for it.


What we found

Three structural findings

 

Early high-intensity exposure, before any history existed

Two new accounts reached Level 4 content before Day 22. Account A, prosocial entry, reached it on Day 1. Account C, traditional masculinity, no extremist content, reached it on Day 22. Neither had posted anything. Neither had followed anyone. Neither had interacted actively. The system reduced the distance to high-intensity content before the accounts had built any behavioural signal for the algorithm to act on.

The neutral account escalated anyway

Account B, fitness and productivity, no gender signal of any kind, sustained Level 3 exposure across the final three sessions of the study and closed with the highest average amplification score among all new accounts, above accounts A and C, which had explicit masculinity signals from the start. The system did not need an entry signal. It decided where to move the account. Entering without ideology does not mean staying in a neutral space.

Architecture converges across entry profiles

The three new accounts, prosocial, neutral and traditional masculinity, converged toward the same exposure range by Day 43. The system did not respond proportionally to the differences in entry profile. It produced similar relational trajectories regardless of where each account started. The risk is not in the user's intent, identity or behaviour. It is in the architecture of the recommendation system itself.


It is not that the user moves toward the content. It is that the content reorganises itself around the user.


Results at study close — Day 43, 21 April 2026

The seven C.A.R.A. indicators were designed before the study began. For each one, a calculation formula and a significance threshold were established and publicly registered prior to data collection. This is a methodological requirement: if thresholds are defined after seeing the results, it is always possible to adjust them to confirm what one wanted to find. C.A.R.A. declares in advance what would constitute a significant finding, and then accepts what the data say.

Account Type Avg amplification CIS Max level CIER
A New / Prosocial 1.075 0.278 4 (Day 1) 1.000
B New / Neutral 1.250 ⬆ highest 0.273 3 (sustained) 0.925
C New / Traditional 1.225 0.337 4 (Day 22) 0.950
D (@demachosahombres, >475K) Existing 1.200 0.300 4 0.960
E (Retiro p/Hombres, ~1.6K) Existing 1.380 0.381 4 0.880
F (MIRACLE, ~1.7K) Existing 1.040 0.283 4 0.980

Gate A activated (A Day 1, C Day 22) · Gate F not activated (max new-account CIS: C=0.337; pre-registered threshold: 0.60) · κ=0.68 · 90.2% global agreement · 420 items classified

On calibration, what the CIS result means

The composite CIS threshold was not triggered. The study is honest about this: it documents significant, measurable exposure to Level 3-4 content without active search, and calibrates the regulatory claim accordingly. A study that claims more than the data supports does not serve regulatory incidence. The evidence is policy-relevant without being maximalist.

The audience-scale finding, a regulatory signal

Account D has more than 475K followers. Account E has approximately 1,600, a 294-fold difference. In the CIER indicator (Cross-Identity Exposure Ratio), Account E showed greater algorithmic enclosure than Account D. Smaller audience, more closed recommendation environment.

This has a direct regulatory implication: audience scale does not predict relational risk. Regulatory frameworks that use follower count as the primary criterion for oversight will systematically misidentify where the risk actually is. Relational positioning, how the system situates an account within a network of content and affinity, is the signal that matters.

Why it matters

What the community said

Alongside the field study, a structured survey was distributed to followers of @demachosahombres (N=147). Two findings are directly relevant:

Finding Data
How did you first find IDMAH? 50.6% arrived via direct algorithmic recommendation — not active search.
Have you received hostile or polarising content about masculinity via algorithm? 28.6% (42/147) said yes.

Note: the survey did not reach the threshold for full statistical robustness (N=200) and is used for qualitative pathway traceability, not as statistically representative inference. The data are consistent with the field study patterns.

What this study reframes

What this study reframes

Radicalization is not the main phenomenon.

Radicalization is a by-product. C.A.R.A. does not study radicalization as an extreme event. It studies something prior: the progressive intensification of identity frames, what happens before the problem becomes visible.

The manosphere operates precisely in that prior stretch, and it does so from inside conventional platforms like Instagram, not from a dark corner of the internet. Red Pill, MG-TOW, incels, dominance narratives: none of these communities exist in a vacuum.

They exist because algorithmic recommendation systems build them, connect them to each other, and deliver them to users who never sought them out. What C.A.R.A. documents is that Instagram reproduces that same pattern autonomously — without any external actor intervening. Radicalization is not the starting point of the problem. It is the final result of trajectories that begin much earlier, with apparently innocuous content.

The algorithm compresses time.

What might previously have taken months or years to consolidate as part of an identity can now begin to take shape in weeks. Not because the content is more extreme, but because the system is more efficient at connecting. A new account with no prior signal reached Level 4 content on Day 1.

Another reached it by Day 22. The architecture does not wait.

The risk is not individual. It is populational.

What matters is not only what happens to one person. What matters is that the same pattern reproduces at scale. When millions of accounts receive similar intensification trajectories, what changes is not the individual. It is the social conversation. The manosphere is not a collection of extreme individuals, it is a structural output of a recommendation architecture operating at population scale.

That is what makes it a regulatory problem, not just a content moderation problem.


Relational reach, the central concept

Relational reach, the central concept

Relational reach is the capacity of an algorithmic system to influence people not through the content it shows directly, but through the way it connects that content with other content, other communities, and other identity trajectories. It is not about how many people see something. It is about how the system organises what they see next.

The manosphere is not a space that exists outside platforms and then migrates into them. It is what the recommendation architecture produces: a path of progressively more extreme recommendations that the algorithm builds step by step, independently of where the user starts. The pipeline below documents how.

An algorithm does not only decide what appears on screen. It decides what you are moved toward. And that movement is not neutral: it links contents to each other, clusters communities together, and can end up organising identity trajectories at population scale, without ever displaying illegal content.

Most current regulation has focused on illegal or overtly harmful content, leaving out a more structural dimension: the architecture of relations that recommendation systems build between content and users. That is the gap C.A.R.A. makes visible and operationally measurable.


The algorithm does not only decide what you see. It decides what you are moved toward.


The pipeline this can produce:

Entry point Trajectory end
Fitness Discipline High performance Male superiority Grievance Antagonism Conflict narrative
Level 1-2 Level 2 Level 2-3 Level 3 Level 3-4 Level 4 Level 4-5

No step in this pipeline requires illegal content. Each recommendation is individually legal. The risk is in the sequence — and the sequence is what C.A.R.A. measures.

That sequence does not stop at Instagram. The algorithmic pathways documented here connect, downstream, to increasingly closed ecosystems across platforms, private Telegram groups, forums, closed communities, where the identities already shaped by recommendation systems find their most extreme expression.

CNN’s April 2026 investigation exposed global networks where men coordinated and monetised the sexual assault of their partners. Those networks operated on Telegram. But their users did not arrive there through Telegram. They arrived through the same kind of progressive, platform-enabled exposure trajectories CARA maps on Instagram. Measuring the upstream architecture is the precondition for understanding how those downstream communities are possible.


Why it matters

Why this study matters

The existing research on algorithmic amplification and radicalization is almost exclusively Anglophone. DCU, King's College, Oxford Internet Institute — rigorous work, but built on Northern, English-language, platform-API-dependent methodologies, calibrated on cultural ecosystems that do not capture the Spanish-speaking world.

C.A.R.A. is different in three dimensions: it was conducted in Spanish, inside a real Spanish-language masculinities ecosystem, without API access or internal platform data.

What exists, and what does not

Existing research What C.A.R.A. adds that is absent
DCU/UCL 2024: new teen accounts on TikTok and YouTube receive manosphere content in 26 minutes. English, experimental, not longitudinal field study. Longitudinal field observation (45 days). Spanish-language ecosystem. Existing accounts with history vs. new accounts. Outside API.
Ribeiro et al. 2020 (ACM): "Auditing Radicalization Pathways on YouTube." Classic pipeline study. English, different platform. Identity-sensitive masculinities ecosystem. Cultural specificity of Latin American and Spanish context.
Over et al., PLOS ONE 2025: young men exposed to manosphere content are almost 5x more likely to consider physical harm acceptable. Observation of the recommendation architecture itself, not downstream effects.
Milli et al., PNAS Nexus 2025: X algorithm amplifies divisive content when optimising for engagement. Not Spanish, not masculinities ecosystem. Real community as field laboratory. 475K members. 8 years of uninterrupted platform history.
"Plataformización del voto" studies (Brazil, Colombia, Mexico): electoral content analysis. Not identity ecosystems, not controlled field observation. Pre-registered thresholds. Protocol replicable without API. Evidence from the Global South for Global South regulatory frameworks.

To the best of our verification in the available literature: there is no prior controlled 45-day observational field study with pre-registered indicator thresholds measuring relational amplification in a Spanish-language identity-sensitive Instagram ecosystem. That is the gap C.A.R.A. fills.

That gap is not a peripheral detail. European audit frameworks are being designed now — primarily on Northern, Anglophone datasets. C.A.R.A. produces evidence from inside a live ecosystem those frameworks do not yet capture. That is a structural limitation of current audit methodology.


We are measuring something that has barely been measured: how algorithms shape identity in real cultural contexts outside the Anglophone world.


Who is affected — ages and scale

The urgency of this work is no longer abstract. In 2025 and 2026, Mexico documented its first incel-motivated attacks: CCH Sur in Mexico City in September 2025, and a preparatory school in Michoacán in March 2026. Both attackers left signals on social media beforehand. No platform had the willingness or the tools to detect them in time. And the recommendation architecture that amplified those trajectories — step by step, week by week — has never been audited: not before the attacks, not after. That is exactly the problem CARA is built to measure.

Latin America has a solid tradition of masculinities research, Olavarría, Viveros Vigoya, and others built a rigorous pre-digital body of work. But the field has not yet caught up with the algorithmic dimension. The question of how recommendation systems shape masculine identity in Spanish-speaking ecosystems has never been studied with controlled field methods. CARA is the first attempt to do that.

Governments and international bodies designing platform regulation right now need evidence. The evidence that exists is Northern, built on Anglo datasets, calibrated on cultural ecosystems that do not include Spanish-speaking contexts. Latin America and Spain have no datasets of their own on these phenomena. That absence is a real political disadvantage at the exact moment when the global regulatory framework for these systems is being written. CARA starts to fill that gap.

Instagram has more than 3 billion monthly active users. Its audience concentrates precisely in the stages of highest identity formation:

Age group % global audience What this means for C.A.R.A.
13-17 (teens) ~7% (likely undercounted) Meta has Teen Accounts with default protections — but research shows manosphere exposure in minutes on TikTok/YouTube. The real number of active minors may be significantly higher.
18-24 ~30% Critical identity formation stage. 76% of this group in the US uses Instagram. ~890M people globally.
25-34 ~33% The largest segment. ~1 billion people. Millennials in active adult identity transition. The largest risk group in absolute numbers.
Total 13-34 +70% The stages where the search for belonging, language, community and self-explanation is most intense.

Sources: Statista / DataReportal / Backlinko (July 2025 - February 2026). DataReportal reports 3B MAU globally in 2026.


These systems do not operate on neutral users. They operate on identities under construction.


If 70% of Instagram's 3 billion users are under 35, we are talking about approximately 2 billion people in stages of active identity formation or consolidation. C.A.R.A. studies how recommendation systems operate on those trajectories. This is not a technology problem, it is a question of cultural infrastructure at civilisational scale.

In Latin America — the region where CARA was conducted — that infrastructure is accelerating without the regulatory frameworks Europe is beginning to build. Mexico, Colombia, and Ecuador all have documented manosphere presence (ONU Mujeres, 2025). In the United States, 70% of young men on YouTube encounter manosphere content weekly. In the United Kingdom, 80% of 16–17-year-old boys have consumed content by Andrew Tate (Hope not Hate, 2023). The manosphere is not a niche phenomenon or a Northern problem: it is global, Spanish-speaking, and expanding precisely in the ecosystems where there is no research of its own. CARA produces, for the first time, evidence from inside one of those ecosystems.


Ten conclusions

Key data at a glance

Duration: 45 days · 10 March – 21 April 2026 · Instagram.

Accounts: 6 total, 3 new with distinct entry profiles + 3 existing from the IDMAH ecosystem.

When did high-intensity content appear? In one account, Day 1. In another, Day 22. In both, without the user having searched for it.

The fitness account: sustained Level 3 content (identity tension) for 3 consecutive weeks. Closed with the highest amplification index among new accounts.

Does audience size determine risk? No. Relational positioning within the ecosystem matters more than follower count.

Method reliability: 90.2% inter-observer agreement · κ=0.68 (substantial, academic standard).

Gate A activated: two new accounts reached Level 4 before Day 30 — A on Day 1, C on Day 22, without active search.

These are the study's declarative conclusions, ready to cite in institutional documents, media coverage, and policy submissions.

The system moves users toward higher-intensity identity content without them searching for it. The algorithm does the work.

High-intensity content can reach a brand new account on Day 1. Before it has followed anyone. Before it has done anything.

The trajectories are not random. They move in a direction: toward increasingly closed, reactive, and hostile frames. That directionality is the finding.

The risk is not in any single piece of content. It is in the sequence. The algorithm builds relationships between contents — and those relationships are what shape identity exposure over time.

Entering without ideology does not mean staying in a neutral space. The account that came in from fitness ended up with the highest amplification index of all new accounts. The system decided where to move it.

The process through which a user gets closer to extreme content is invisible to the user, invisible to the researcher, and invisible to the regulator. That invisibility is not a bug. It is the architecture.

The problem is not that extreme content exists. The problem is how the system grants access to it, step by step, through content that is individually legal the whole way.

A 294-fold difference in audience size produced the inverse risk pattern. The smaller account was more algorithmically enclosed than the large one. Follower count is the wrong metric for regulatory oversight.

Social cohesion is not only damaged by what people see. It is damaged by where the system takes them — by the identities it builds around them over time, without them noticing.

Auditing platforms for content is not enough. You have to audit the architecture, the relational structure that decides what comes next. That is what CARA is built to do.


Publications

Document Status Access
Policy Brief: "Measuring Relational Risk in VLOPs: Field Evidence and Audit Implications for DSA Systemic Risk Assessment"
Nicko Nogués · C.A.R.A. Initiative · IDMAH · Valencia, 2026
Published
Zenodo, April 2026
doi.org/10.5281/zenodo.19863879
Permanent DOI · open access
Empirical Paper: "Relational Risk in Recommendation Systems: Evidence from a 45-day Instagram Field Study and Implications for EU Platform Oversight"
Nicko Nogués · C.A.R.A. Initiative · 2026
Preprint forthcoming: SSRN / OSF
Under review: Internet Policy Review
SSRN link (add when active)
ORCID: 0009-0004-4640-8973

The Researcher

 

Nicko Nogues

Nicko Nogués

Principal Investigator, C.A.R.A. Initiative · Founder, IDMAH · Valencia, Spain

C.A.R.A. is the convergence of twenty years of practice at the intersection of cultural systems, organisational strategy, and identity, and a sustained research engagement with algorithmic governance and EU regulatory frameworks.

The field laboratory, IDMAH (@demachosahombres), is not peripheral to this research. It is the methodological condition that makes it irreplicable from outside: more than 471K community members during fieldwork, 8 years of uninterrupted platform history, the largest Spanish-language masculinities ecosystem in the world. No external institution holds this combination of access, scale, cultural depth, and duration in an identity-sensitive context of documented regulatory concern.

Prior: executive strategy roles leading teams of up to 80 professionals for Nike, Google and Coca-Cola across Spain, Sweden, the United States and Mexico. Author of Hackea tu Macho (Planeta, 2021) and Posmacho Alfa (Penguin Random House, 2025). Recognised by the French Government's PIPA Programme as one of six most innovative leaders in the Americas.


Work with C.A.R.A.

C.A.R.A. opens a line of work that can grow in several directions.

The protocol is documented, field-validated, and replicable without platform cooperation. The regulatory argument is mapped to existing EU obligations. The field laboratory is live. What is missing is what you can bring.

Four ways to get involved

Type of collaboration What it involves Who it is for
Closed media briefing Access to the methodology, aggregated results and researcher before publication. We explain what the numbers mean, what is citable, and what the regulatory stakes are. No publication embargo required. Journalists and editorial teams at El País, BBC, CNN en Español, Der Spiegel, Le Monde, and equivalents. If you are covering algorithmic governance, platform regulation, or masculinity and digital culture, this is for you.
Institutional collaboration C.A.R.A. is available for co-authorship on regulatory submissions, DSA Article 34 systemic risk assessment input, and advisory roles for EU bodies, think tanks, and national regulators. The Policy Brief is already in circulation with JRC HUMAINT and CEPS. EU AI Office, ECAT, national digital regulators (AESIA and equivalents), think tanks working on DSA/AI Act implementation, and academic institutions seeking a Global South research partner.
Second-phase funding The protocol is ready for replication in other identity ecosystems, languages, and platforms. The second phase requires dedicated funding. We are actively in conversation about this and welcome new interlocutors. Foundations, international research funds, and institutional partners interested in algorithmic governance, social cohesion, or digital masculinities research outside the Anglophone world.
Replicate the protocol Apply the C.A.R.A. framework in your own ecosystem. The codebook, pre-registration template, and indicator specification are available through the OSF repository. We can support methodological onboarding. Research organisations, civil society groups and universities working on identity ecosystems, platform auditing, or algorithmic transparency in any language or cultural context.

The regulatory frameworks being written right now will shape platform governance for the next decade. C.A.R.A. exists to make sure they are written with evidence from the world where most people actually live.


+ CONTACT ME