Back to results
US 11,886,575 B1Granted
Methods and systems for fraud containment
AssigneeThe 41st Parameter, Inc.
InventorElazar Katz
Life of this patent
Estimating the term…
Abstract
Systems and methods for fraud containment are provided in accordance with an embodiment of the invention. A fraud event may be detected. One or more devices that may be used in perpetrating the fraud event may be detected. Additionally one or more potential fraud victims, who may be grouped into victim circles may be detected. The threat level to the victims and/or victim circles may be assessed. In some instances, behavioral profiles may be utilized to make fraud assessments. Based on the threat level, recommendations for fraud containment responses may be provided.
Claims20
A system for device identification in an electronic fraudulent event, the system comprising:
- a web server for comprising one or more processors configured to execute at least a portion of a fraud containment system;
- and
- a memory for storing computer instructions of the fraud containment system, the computer instructions, when executed, causing the one or more processors of the web server to:
- access a first electronic repository storing at least:
- a plurality of data records corresponding to a plurality of device identifiers and a plurality of account identifiers;
- calculate a plurality of proximity indicators each associated with each of the plurality of device identifiers, a proximity indicator representing a likelihood of association between a device and the electronic fraudulent event based at least in part on a comparison between device activity information associated with the device and the electronic fraudulent event;
- based on the plurality of proximity indicators, identify a master perpetrator device associated with the electronic fraudulent event and associated with a first device identifier of the plurality of device identifiers and a first account identifier of the plurality of account identifiers, wherein first proximity indicator of the plurality of proximity indicators is associated with the master perpetrator device based on the first proximity indicator being greater than a predetermined threshold wherein the first proximity indicator is increased if the master perpetrator device is in use when the electronic fraudulent event occurs;
- execute an automated search on the first electronic repository using the plurality of proximity indicators to identify a first set of device identifiers;
- generate a risk score for each of the first set of device identifiers, the risk score representing a first confidence level indicating a likelihood that a given device identifier of the first set of device identifiers is associated with a victim of the electronic fraudulent event;
- based at least in part on the first set of device identifiers and the risk scores associated with the first set of device identifiers, determine a priority index that indicates an order of action taken in response to the electronic fraudulent event;
- and
- based at least on the priority index, generate and transmit a recommendation to one or more devices associated with the first set of device identifiers rather than the master perpetrator device.
9 more elements
A method for device identification in an electronic fraudulent event, the method comprising:
- accessing a first electronic repository storing at least:
- a plurality of data records corresponding to a plurality of device identifiers, and a plurality of account identifiers;
- calculating a plurality of proximity indicators each associated with each of the plurality of device identifiers, a proximity indicator representing a likelihood of association between a device and the electronic fraudulent event based at least in part on a comparison between device activity information associated with the device and the electronic fraudulent event;
- based on the plurality of proximity indicators, identifying a master perpetrator device associated with the electronic fraudulent event and associated with a first device identifier of the plurality of device identifiers and a first account identifier of the plurality of account identifiers, wherein first proximity indicator of the plurality of proximity indicators is associated with the master perpetrator device based on the first proximity indicator being greater than a predetermined threshold, wherein the first proximity indicator is increased if the master perpetrator device is in use when the electronic fraudulent event occurs;
- executing an automated search on the first electronic repository using the plurality of proximity indicators to identify a first set of device identifiers;
- generating a risk score for each of the first set of device identifiers, the risk score representing a first confidence level indicating a likelihood that a given device identifier of the first set of device identifiers is associated with a victim of the electronic fraudulent event;
- based at least in part on the first set of device identifiers and the risk scores associated with the first set of device identifiers, determining a priority index that indicates an order of action taken in response to the electronic fraudulent event;
- and
- based at least on the priority index, generating and transmitting a recommendation to one or more devices associated with the first set of device identifiers rather than the master perpetrator device.
6 more elements
A non-transitory computer readable storage medium stored therein computer-readable instructions that, when executed, cause a processor for device identification in an electronic fraudulent event to perform steps of:
- accessing a first electronic repository storing at least:
- a plurality of data records corresponding to a plurality of device identifiers, and a plurality of account identifiers;
- calculating a plurality of proximity indicators each associated with each of the plurality of device identifiers, a proximity indicator representing a likelihood of association between a device and the electronic fraudulent event based at least in part on a comparison between device activity information associated with the device and the electronic fraudulent event;
- based on the plurality of proximity indicators, identifying a master perpetrator device associated with the electronic fraudulent event and associated with a first device identifier of the plurality of device identifiers and a first account identifier of the plurality of account identifiers, wherein first proximity indicator is associated with the master perpetrator device based on the first proximity indicator being greater than a predetermined threshold, wherein the first proximity indicator is associated with a degree of separation between the master perpetrator device and another device;
- execute an automated search on the first electronic repository using the plurality of proximity indicators to identify a first set of device identifiers;
- generating a risk score for each of the first set of device identifiers, the risk score representing a first confidence level indicating a likelihood that a given device identifier of the first set of device identifiers is associated with a victim of the electronic fraudulent event;
- based at least in part on the first set of device identifiers and the risk scores associated with the first set of device identifiers, determining a priority index that indicates an order of action taken in response to the electronic fraudulent event;
- and
- based at least on the priority index, generating and transmitting a recommendation to one or more devices associated with the first set of device identifiers rather than the master perpetrator device.
6 more elements
Dependencies are inferred from the claim text.