Method and system for detecting two-factor authentication

A system, comprising:

• a processor executing a web browser extension;
• and
• a memory having programming instructions and the web browser extension stored thereon, the web browser extension, when executed by the processor, performs an operation, comprising:
• identifying, by the web browser extension, an indication of an account associated with a computing device;
• based on the identifying, detecting, by the web browser extension, that the computing device navigated to a web page hosted by a third party server;
• determining, by the web browser extension, that the third party server prompted the computing device to perform an authorization operation during a log-in operation on the web page;
• determining, by the web browser extension, that the authorization operation with the third party server does not include two-factor authentication functionality;
• and
• based on the determining, prompting, by the web browser extension via an application programming interface (API), an organization computing system to update a fraud metric associated with the account without preventing the computing device from accessing the web page hosted by the third party server.

A method for assessing a fraud risk, comprising:

• identifying, by a web browser extension executing on a computing device, an account associated with the computing device;
• based on the identifying, detecting, by the web browser extension, that the computing device navigated to a web page hosted by a third party server;
• identifying, by the web browser extension, a document object model generated by a web browser executing on the computing device;
• parsing, by the web browser extension, the document object model to determine whether the computing device has opted into two-factor authentication functionality with the third party web server during a log-in operation on the web page;
• determining, by the web browser extension, that the computing device did not opt into the two-factor authentication functionality;
• and
• based on the determining, notifying, by the web browser extension, an organization computing system that the computing device did not opt into the two-factor authentication functionality without preventing the computing device from accessing the web page hosted by the third party server.