Devices & Your Business device based fraud detection in the modern age and what to ask
Why stopping fraud is important? How much loss is incurred due to fraud? Do you know? What is ”your” fraud? Stolen Identity Call Center Impersonation CC Fraud ACH Fraud Synthetic Identity
Is this Important to your Business Do you sell anything to users? Do you take Credit Card / ACH transactions? Can users make financial changes in your business? Is the companies reputation important?
Determine Trust with a Person You Context of the conversation Reputation among friends Business Dunn & Bradstreet Rating Credit Score
Determine Trust with a Device Maybe? Communication method Device Identifier iPhone 5S v. iPhone X Android 8 v. Android One Strange Device Attributes
Trust”ed” Device? What about? Reputation of Shared Devices Wifes device v. Husbands Device Insight from other Businesses Good or Bad Device Known Bad Attributes Battery at 13% + Sensors are default + First time seen Device Orientation is face-down, Screen light is off
Trust but Verify Insight from Businesses Real-time Business Rules What type of Fraud happened? Chat Abuse CC Fraud NSF Non-Friendly Synthetic Identity Real-time Business Rules Geo-location Velocity Proxy Piercing, VPN, Anonymous Identification Device Actions / Activities Account & Device Relationships
Limit Exposure STOP sharing your users PII STOP IT! Metadata is GOLDEN with a Rules Engine
What TO expect in real-time? Device Reputation across all consumers of service Results of Business Rules designed for that transaction Communication information Device Information Location Information Associations Device and Accounts
Ask Fraud Vendors Do you need PII? Device based fraud, is it shared among all consumers? Rules engine offer Real-time results? (Under <100 ms response) Datacenter uptime? (total = uptime - planned - unplanned) What if device is not identified? What if ad blockers are used by our users?