Contactless payment relay attack protection

A non-transitory storage medium having instructions stored thereon that when executed by a computing system direct the computing system to:

• receive an online authorization request including a cryptogram, an identifier of a payment device, a measured processing time, and a reference processing time, wherein the reference processing time corresponds to an amount of time that the payment device performs a particular command in a monetary transaction, wherein the measured processing time is a measured amount of time that the payment device performed the particular command in the monetary transaction;
• verify the cryptogram;
• determine that the measured processing time exceeds the reference processing time;
• in response to the measured processing time exceeding the reference processing time, perform an artificial intelligence transaction analysis for the monetary transaction, the artificial intelligence transaction analysis comprising:
• retrieve, from training data of an artificial intelligence transaction model, past device data based on the identifier of the payment device, wherein the past device data includes previous measured processing times of payment devices similar to the payment device;
• compare, by the artificial intelligence transaction model, the measured processing time to the previous measured processing times of payment devices similar to the payment device;
• and
• produce, by the artificial intelligence transaction model, a confidence assessment indicating a likelihood that a difference between the reference processing time and the measured processing time is acceptable;
• and
• transmit, based on the confidence assessment, an online authorization response to a terminal wherein the online authorization response authorizes the monetary transaction.