Device Intelligence
Detect fraud risk using device fingerprinting, tamper signals, and network indicators (VPN, emulator, root/jailbreak).
Device Intelligence Overview
The Device Intelligence check uses device fingerprinting and device risk signals to detect fraud. It inspects the device and network connection to identify tampering, automation, and suspicious behavior.
This service helps ensure that only trusted and genuine devices are used during customer onboarding.
It supports a range of device types, including:
Mobile phones
Tablets
Laptops and desktop PCs
Kiosks and POS terminals
Common use cases
Use Device Intelligence to reduce fraud across key customer journeys:
KYC onboarding and account opening: Spot high-risk devices early in your Workflows.
Account takeover (ATO): Detect unusual device fingerprints and network changes.
Bot protection: Identify automated sessions and scripted sign-ups.
Promo and referral abuse: Flag device reuse across multiple accounts.
Analysis performed
The check performs device, network, and bot risk assessments. It also tracks signals over time to identify repeat fraud patterns.
Detailed verification checks
Device Analysis
Previously enrolled device: Flags devices reused across multiple customer accounts.
Emulator detection: Flags attempts to use virtualized or emulated devices.
Rooted/Jailbroken device: Detects compromised operating systems with escalated privileges.
Cloned app: Identifies duplicate or cloned versions of applications.
Browser tampering: Detects altered or suspicious browser setups.
Virtual machine: Flags devices running inside virtual environments.
Location spoofing: Detects falsified or masked geolocation signals.
Frida detection: Detects mobile debugging and manipulation frameworks.
Network Analysis
VPN detection: Identifies usage of Virtual Private Networks.
Relay detection: Detects relay service providers.
Bot Analysis
Bot detection: Detects whether sessions are automated or bot-driven.
Timeline Analysis
Device timeline analysis: Monitors device behavior patterns across sessions.
Network timeline analysis: Tracks network usage over time to spot anomalies.
Sample result
The example below shows a representative Device Intelligence result for device, network, and bot risk outcomes.
Use it to see how device signals, fraud indicators, and verification findings may appear in a Device Intelligence report.
This example is illustrative. Exact fields, values, and layout may vary by workflow, configuration, and result.
Check duration
A Device Intelligence Check takes an average of 2 seconds to complete.
Frequently asked questions
What is Device Intelligence in fraud prevention?
Device Intelligence uses device fingerprinting and risk signals to detect suspicious devices, networks, and sessions.
It helps identify fraud before or during onboarding.
What does device fingerprinting detect?
Device fingerprinting helps identify whether a device has been seen before and whether it shows signs of tampering or abuse.
It can surface patterns linked to repeated fraud, multi-accounting, and suspicious session behavior.
What fraud signals can Device Intelligence detect, such as VPNs, emulators, and rooted devices?
Yes.
Device Intelligence can detect signals such as VPN usage, emulators, virtual machines, rooted or jailbroken devices, browser tampering, and location spoofing.
Can Device Intelligence help prevent multi-account abuse?
Yes.
It helps flag device reuse, suspicious device changes, bot activity, and other signals linked to account takeover, promo abuse, and duplicate accounts.
Should I combine Device Intelligence with Email Intelligence and Mobile Intelligence checks?
Yes.
Device Intelligence works well with Email Intelligence and Mobile Intelligence when you want to assess device, email, and phone number risk together.
You can also combine them with checks such as Document Check, Identity Check, and AML Screening Check for broader fraud and compliance coverage.
Related checks
Combine Device Intelligence with other fraud intelligence signals:
Email Intelligence for email reputation and threat signals, including disposable email detection and breach exposure.
Mobile Intelligence for phone number risk scoring and reputation signals.
Related topics
Use these to run Device Intelligence Check inside a broader KYC orchestration and decisioning:
Workflows to orchestrate verification checks into a unified customer journey.
Policies to enforce consistent decision logic across different journeys.
Advanced Case Management to handle exceptions, assign tasks, and manage reviewer decisions.
Last updated
Was this helpful?