Logical validation of devices against fraud and tampering

A system comprising:

• one or more processors;
• and
• one or more non-transitory computer-readable media storing instructions executable by the one or more processors, wherein the instructions cause the one or more processors to perform acts comprising:
• receiving, at a payment server from a payment terminal of a merchant, an initial request to attest the payment terminal;
• generating, by the payment server, an attestation routine, wherein the attestation routine comprises test criteria;
• sending, by the payment server to the payment terminal, the attestation routine;
• receiving, at the payment server and from the payment terminal, attestation data based at least in part on execution of the attestation routine;
• based at least in part on the attestation data and payment transaction data, determining, by the payment server, one or more indications of one or more fraudulent transactions or tamper attempts associated with one or more payment transactions;
• storing the one or more indications in association with the attestation data and the payment transaction data in a transaction database;
• receiving, by the payment server, feedback data, wherein the feedback data includes, for an individual payment transaction of the one or more payment transactions, an indication that the payment transaction was improperly denied or improperly accepted;
• storing the feedback data in association with the payment transaction data in the transaction database;
• based at least in part on the one or more indications and the feedback data, updating, by the payment server, the test criteria to updated test criteria;
• and
• generating, by the payment server, an updated attestation routine comprising the updated test criteria.

One or more non-transitory computer-readable media storing instructions executable by one or more processors that, when executed by the one or more processors, cause the one or more processors to perform acts comprising:

• receiving, at a payment server from a payment terminal of a merchant, an initial request to attest the payment terminal;
• generating, by the payment server, an attestation routine, wherein the attestation routine comprises test criteria;
• sending, by the payment server to the payment terminal, the attestation routine;
• receiving, at the payment server and from the payment terminal, attestation data based at least in part on execution of the attestation routine;
• based at least in part on the attestation data and payment transaction data, determining, by the payment server, one or more indications of one or more fraudulent transactions or tamper attempts associated with one or more payment transactions;
• storing the one or more indications in association with the attestation data and the payment transaction data in a transaction database;
• receiving, by the payment server, feedback data, wherein the feedback data includes, for an individual payment transaction of the one or more payment transactions, an indication that the payment transaction was improperly denied or improperly accepted;
• storing the feedback data in association with the payment transaction data in the transaction database;
• based at least in part on the one or more indications and the feedback data, updating, by the payment server, the test criteria to updated test criteria;
• and
• generating, by the payment server, an updated attestation routine comprising the updated test criteria.