The flagging usually comes down to two things, same device fingerprint and same IP. Sort those two out properly and the accounts function completely independently. Most people focus on the VPN part and ignore the browser fingerprint side which is actually what gets them caught.

Most people underestimate how closely platforms monitor account behaviour. The whole point of figuring out how to create multiple Bybit accounts and manage them securely is making each profile appear completely independent at a technical level, separate device environment, separate digital fingerprint, not just a different email address. Patching this together manually tends to fall apart pretty quickly. Dedicated tools exist that handle this automatically and consistently. The details of what actually works in practice are laid out clearly here https://gologin.com/blog/multiple-bybit-accounts/