Secondary fraud detection during transaction verifications

A system comprising:

• a processor;
• and
• a tangible, non-transitory memory configured to communicate with the processor, the tangible, non-transitory memory having instructions stored thereon that, in response to execution by the processor, cause the processor to perform operations comprising:
• identifying, by the processor, a primary fraud risk based on a transaction request corresponding to a transaction account;
• identifying, by the processor, a notification channel for a fraud protection notification;
• transmitting, by the processor, a notification through the notification channel to a user device in response to identifying the primary fraud risk, the notification comprising a link to a risk assessment engine comprising a confirmation link that confirms the transaction is legitimate;
• obtaining, by the processor, a response to the notification from the user device, the response comprising the user device accessing the link to the risk assessment engine;
• executing, by the processor, a script associated with the link, the script configured to retrieve and capture user device data from the user device accessing the link to the risk assessment engine, wherein the user device data comprises at least one characteristic corresponding to software or physical parameters of the user device;
• receiving, by the processor, captured user device data from the script;
• retrieving, by the processor, historical transaction fraud data based on the captured user device data, the historical transaction fraud data comprising a plurality of device data characteristics known to originate from a fraudulent source;
• determining, by the processor, a secondary fraud risk based on the captured user device data by determining whether the captured user device data matches data from the historical transaction fraud data;
• and
• transmitting, by the processor, a fraudulent verification notification to a payment system in response to determining that the secondary fraud risk is a high risk based upon the captured device data matching data from the historical transaction data.

An article of manufacture including a non-transitory, tangible computer readable storage medium having instructions stored thereon that, in response to execution by a computer-based system, cause the computer-based system to perform operations comprising:

• identifying, by the computer-based system, a primary fraud risk based on a transaction request corresponding to a transaction account;
• identifying, by the computer-based system, a notification channel for a fraud protection notification;
• transmitting, by the computer-based system, a notification to a user device in response to identifying the primary fraud risk, the notification sent through the notification channel and comprising a link to a risk assessment engine comprising a confirmation link that confirms the transaction is legitimate;
• obtaining, by the computer-based system, a response to the notification from the user device, the response comprising the user device accessing the link to the risk assessment engine;
• executing, by the computer-based system, a script associated with the link, the script configured to retrieve and capture user device data from the user device accessing the link to the risk assessment engine, wherein the user device data comprises at least one characteristic corresponding to software or physical parameters of the user device;
• receiving, by the computer-based system, captured user device data from the script;
• retrieving, by the computer-based system, historical transaction fraud data based on the captured user device data, the historical transaction fraud data comprising a plurality of device data characteristics known to originate from a fraudulent source;
• determining, by the computer-based system, a secondary fraud risk based on the captured user device data by determining whether the captured user device data matches data from the historical transaction fraud data;
• and
• transmitting, by the computer-based system, a fraudulent verification notification to a payment system in response to determining that the secondary fraud risk is a high risk based upon the captured device data matching data from the historical transaction data.