The multiple identity works off cookies so it wont matter if they are in fifteenth countries. My guess is they are sharing login info. I would message them and ask, this way they will know if they should chafe their passwords if they aren't sharing