1. Devices & Your Business
device based fraud detection in the modern age and what to ask

2. Why stopping fraud is important?
How much loss is incurred due to fraud?
Do you know?
What is ”your” fraud?
Stolen Identity
Call Center Impersonation
CC Fraud
ACH Fraud
Synthetic Identity

3. Is this Important to your Business
Do you sell anything to users?
Do you take Credit Card / ACH transactions?
Can users make financial changes in your business?
Is the companies reputation important?

4. Determine Trust with a Person
You
Context of the conversation
Reputation among friends
Business
Dunn & Bradstreet Rating
Credit Score

5. Determine Trust with a Device
Maybe?
Communication method
Device Identifier
iPhone 5S v. iPhone X
Android 8 v. Android One
Strange Device Attributes

6. Trust”ed” Device? What about? Reputation of Shared Devices
Wifes device v. Husbands Device
Insight from other Businesses
Good or Bad Device
Known Bad Attributes
Battery at 13% + Sensors are default + First time seen
Device Orientation is face-down, Screen light is off

7. Trust but Verify Insight from Businesses Real-time Business Rules
What type of Fraud happened?
Chat Abuse
CC Fraud
NSF Non-Friendly
Synthetic Identity
Real-time Business Rules
Geo-location Velocity
Proxy Piercing, VPN, Anonymous Identification
Device Actions / Activities
Account & Device Relationships

8. Limit Exposure STOP sharing your users PII STOP IT!
Metadata is GOLDEN with a Rules Engine

9. What TO expect in real-time?
Device Reputation across all consumers of service
Results of Business Rules designed for that transaction
Communication information
Device Information
Location Information
Associations Device and Accounts

10. Ask Fraud Vendors Do you need PII?
Device based fraud, is it shared among all consumers?
Rules engine offer Real-time results? (Under <100 ms response)
Datacenter uptime? (total = uptime - planned - unplanned)
What if device is not identified?
What if ad blockers are used by our users?