Cross-domain frequency filters for fraud detection

A computer-implemented method comprising:

• receiving, by a content provider device of a content provider and from a client device, a request comprising a probabilistic data structure that represents each triggered frequency filter, in a set of frequency filters for multiple content providers, for which an event count for a specified event type corresponding to the frequency filter exceeds a maximum event count defined by the frequency filter during a time period corresponding to a specified time duration for the frequency filter;
• determining, by a content provider device by querying the probabilistic data structure, whether one or more frequency filters of the content provider are triggered frequency filters represented by the probabilistic data structure;
• and
• determining, by the content provider device, a response to the request based on the determination of whether the one or more frequency filters of the content provider are triggered frequency filters represented by the probabilistic data structure.

A system comprising:

• one or more processors of a content provider device of a content provider;
• and
• one or more storage devices storing instructions that, when executed by the one or more processors, cause the one or more processors to perform operations comprising:
• receiving, by the content provider device and from a client device, a request comprising a probabilistic data structure that represents each triggered frequency filter, in a set of frequency filters for multiple content providers, for which an event count for a specified event type corresponding to the frequency filter exceeds a maximum event count defined by the frequency filter during a time period corresponding to a specified time duration for the frequency filter;
• determining, by the content provider device by querying the probabilistic data structure, whether one or more frequency filters of the content provider are triggered frequency filters represented by the probabilistic data structure;
• and
• determining, by the content provider device, a response to the request based on the determination of whether the one or more frequency filters of the content provider are triggered frequency filters represented by the probabilistic data structure.

A non-transitory computer-readable medium comprising instructions that, when executed by a processor, cause the processor to perform operations comprising:

• receiving, by a content provider device of a content provider and from a client device, a request comprising a probabilistic data structure that represents each triggered frequency filter, in a set of frequency filters for multiple content providers, for which an event count for a specified event type corresponding to the frequency filter exceeds a maximum event count defined by the frequency filter during a time period corresponding to a specified time duration for the frequency filter;
• determining, by a content provider device by querying the probabilistic data structure, whether one or more frequency filters of the content provider are triggered frequency filters represented by the probabilistic data structure;
• and
• determining, by the content provider device, a response to the request based on the determination of whether the one or more frequency filters of the content provider are triggered frequency filters represented by the probabilistic data structure.