Systems and methods for detecting fraudulent use of a serial code for accessing an associated value stored on a network

A system for detecting fraudulent use of a gift card serial code at a client terminal during an automated gift card bot attack, comprising:

• a non-transitory memory having stored there a code for execution by at least one hardware processor of a computing system, the code comprising code for:
• receiving by a computing system, from the client terminal via a network, a serial code and a request to obtain a value associated with the serial code,
• accessing a first database storing a plurality of valid serial codes each associated with a valid value;
• wherein the first database is accessed for each received serial code;
• determining when no match is found between the received serial code and the plurality of valid serial codes stored in the first database:
• accessing a second database storing a plurality of invalid serial codes each associated with a unique invalid value;
• generating a unique invalid value for the received serial code in the second database that matches a structural format of a valid value of a valid serial code of the first database, the matching structural format including a pattern of at least one of:
• letters, numbers, and symbols;
• wherein the unique invalid value is generated according to at least one member of the group consisting of:
• a random selection of a valid value of a valid serial code stored in the first database,
• an average of valid values of valid serial codes stored in the first database, and
• a value selected from a distribution function that models a distribution of valid values of valid serial codes stored in the first database,
• pairing the received serial code to the generated unique invalid, and
• storing a new record in the second database including the paired received serial code and the generated unique invalid value;
• and
• providing, to the client terminal via the network, the unique invalid value paired with the received serial code,
• when a match is found between the received serial code and a unique valid serial code of the plurality of valid serial codes stored in the first database, providing, to the client terminal via the network, the valid value paired with the valid serial code stored in the first database;
• identifying a sequence of requests provided by the client terminal;
• detecting a brute-force attack based on at least one member of the group consisting of:
• a plurality of sequentially related serial codes that are incrementally increased for each request, and a rate of incoming requests per unit time above a threshold which is indicative of an automated attack;
• blocking additional requests from the client terminal;
• and
• releasing at least one of:
• processing resources, memory resources, and network resources, allocated to processing the requests from the client terminal.

A computer program product for detecting fraudulent use of a gift card serial code at a client terminal during an automated gift card bot attack, comprising:

• a non-transitory memory having stored there a code for execution by at least one hardware processor of a computing system, the code comprising instructions for:
• receiving by a computing system, from the client terminal via a network, a serial code and a request to obtain a value associated with the serial code,
• wherein the serial code includes a gift card serial number, and wherein the value includes a remaining balance associated with the gift card serial number;
• accessing a first database storing a plurality of valid serial codes each associated with a valid value;
• wherein the first database is accessed for each received serial code;
• determining when no match is found between the received serial code and the plurality of valid serial codes stored in the first database:
• accessing a second database storing a plurality of invalid serial codes each associated with a unique invalid value,
• generating a unique invalid value for the received serial code in the second database that matches a structural format of a valid value of a valid serial code of the first database, the matching structural format including a pattern of at least one of:
• letters, numbers, and symbols;
• wherein the unique invalid value is generated according to at least one member of the group consisting of:
• a random selection of a valid value of a valid serial code stored in the first database,
• an average of valid values of valid serial codes stored in the first database, and
• a value selected from a distribution function that models a distribution of valid values of valid serial codes stored in the first database, and
• pairing the received serial code to the generated unique invalid value, and
• storing a new record in the second database including the paired received serial code and the generated unique invalid value;
• and
• providing, to the client terminal via the network, the unique invalid value paired with the received serial code,
• when a match is found between the received serial code and a unique valid serial code of the plurality of valid serial codes stored in the first database, providing, to the client terminal via the network, the valid value paired with the valid serial code stored in the first database;
• identifying a sequence of requests provided by the client terminal;
• detecting a brute-force attack based on at least one member of the group consisting of:
• a plurality of sequentially related serial codes that are incrementally increased for each request, and a rate of incoming requests per unit time above a threshold which is indicative of an automated attack;
• blocking additional requests from the client terminal;
• and
• releasing at least one of:
• processing resources, memory resources, and network resources, allocated to processing the requests from the client terminal.