Location based transaction authentication

A method, comprising:

• determining a user location of a user based on a device location of a mobile device that is associated with the user;
• determining a transaction location of a transaction associated with an account of the user of the mobile device;
• comparing the user location of the user and the transaction location of the transaction;
• generating an authentication message including a one time password for display, the authentication message configured to show the one time password in response to determining that the user location matches the transaction location and mask the one time password in response to determining that the user location does not match the transaction location;
• and
• responsive to the one time password being masked, one of:
• revealing the one time password in the authentication message in response to receiving an input to authenticate the transaction;
• or
• restricting approval of the transaction by the mobile device, maintaining the masked one time password in the authentication message, and communicating an indication that the transaction is fraudulent.

A system, comprising:

• a mobile device that is associated with a consumer account of a user;
• and
• a transaction authentication manager implemented at least partially in hardware and configured to:
• compare a device location of the mobile device with a transaction location of a transaction associated with the consumer account;
• generate an authentication message including a one time password for display, the authentication message configured to show the one time password in response to determining that the device location matches the transaction location and mask the one time password in response to determining that the device location does not match the transaction location;
• and
• responsive to the one time password being masked, one of:
• reveal the one time password in the authentication message in response to receiving an input on the mobile device to authenticate the transaction;
• or
• restrict approval of the transaction by the mobile device, maintain the masked one time password in the authentication message, and communicate an indication that the transaction is fraudulent.