Device specific remote disabling of applications

A system comprising:

• a non-transitory memory;
• and
• one or more hardware processors coupled to the non-transitory memory and configured to read instructions from the non-transitory memory cause the system to perform operations comprising:
• automatically detecting activity data of application usage in an application on a first remote computing device, wherein the activity data comprises at least one pattern of activity performed by a user during electronic transaction processing of a transaction using the application;
• determining that the at least one pattern of activity exceeds a risk threshold for unusual activity within the application based on a predefined set of rules for one or more predefined patterns of activity for the electronic transaction processing in the application;
• and
• responsive to determining that the at least one pattern of activity exceeds the risk threshold for unusual activity:
• cross-referencing the at least one pattern of activity with the one or more predefined patterns of activity to identify one or more features of the application that correspond to the at least one pattern of activity,
• receiving a request transmitted from a second remote computing device to remotely disable the one or more features of the application,
• authenticating, by a service provider, the request, and
• remotely disabling the one or more features of the application on the first remote computing device based on the authenticating the request.

A non-transitory machine-readable medium having stored thereon machine-readable instructions executable to cause a machine to perform operations comprising:

• autonomously detecting activity data of application usage in an application on a first remote computing device, wherein the activity data comprises one or more attributes of an electronic transaction processing operation for a transaction in the application;
• determining that the one or more attributes exceeds a risk threshold for suspicious activity within the application based on a predefined set of rules for electronic transaction processing in the application;
• and
• responsive to determining that the one or more attributes corresponding to the first remote computing device exceed the risk threshold for suspicious activity and are not compatible with a service provider:
• cross-referencing the one or more attributes with the predefined set of rules to identify one or more features of the application,
• receiving a request transmitted from a second remote computing device to remotely disable the one or more features of the application,
• authenticating, by the service provider, the request, and
• remotely disabling the one or more features of the application on the first remote computing device based on the authenticating the request.