Methods and systems for fraud containment
AssigneeThe 41st Parameter, Inc.
InventorElazar Katz
Life of this patent
Estimating the term…
Abstract
Systems and methods for fraud containment are provided in accordance with an embodiment of the invention. A fraud event may be detected. One or more devices that may be used in perpetrating the fraud event may be detected. Additionally one or more potential fraud victims, who may be grouped into victim circles may be detected. The threat level to the victims and/or victim circles may be assessed. In some instances, behavioral profiles may be utilized to make fraud assessments. Based on the threat level, recommendations for fraud containment responses may be provided.
Claims21
-10. (canceled)
A system for device identification in an electronic fraudulent event, the system comprising:
- a web server for comprising one or more processors configured to execute at least a portion of a fraud containment system;
- and
- a memory for storing computer instructions of the fraud containment system, the computer instructions, when executed, causing the one or more processors of the web server to:
- calculate a plurality of proximity indicators each associated with a plurality of device identifiers, a first proximity indicator of the plurality of proximity indicators representing a likelihood of association between a first device and the electronic fraudulent event based at least in part on a comparison between device activity information associated with the first device and the electronic fraudulent event, wherein the first proximity indicator increases (i) if the first device is in use when the electronic fraudulent event occurs, or (ii) if device activity or account activity associated with the first device is similar to device activity or account activity associated with the electronic fraudulent event;
- based on the plurality of proximity indicators, identify (i) a master perpetrator device associated with the electronic fraudulent event and associated with a first device identifier of the plurality of device identifiers and (ii) an accomplice device in support of the master perpetrator device and associated with a second device identifier of the plurality of device identifiers;
- and
- generate, based on a risk score for each of a first set of device identifiers, and transmit a recommendation including an order of action taken in response to the electronic fraudulent event to one or more devices associated with the first set of device identifiers excluding the master perpetrator device and the accomplice device, the risk score representing a first confidence level indicating a likelihood that a given device identifier of the first set of device identifiers is associated with a victim of the electronic fraudulent event.
A method for device identification in an electronic fraudulent event, the method comprising:
- calculating a plurality of proximity indicators each associated with a plurality of device identifiers, a first proximity indicator of the plurality of proximity indicators representing a likelihood of association between a first device and the electronic fraudulent event based at least in part on a comparison between device activity information associated with the first device and the electronic fraudulent event, wherein the first proximity indicator increases (i) if the first device is in use when the electronic fraudulent event occurs, or (ii) if device activity or account activity associated with the first device is similar to device activity or account activity associated with the electronic fraudulent event;
- based on the plurality of proximity indicators, identifying (i) a master perpetrator device associated with the electronic fraudulent event and associated with a first device identifier of the plurality of device identifiers and (ii) an accomplice device in support of the master perpetrator device and associated with a second device identifier of the plurality of device identifiers;
- and
- generating and transmitting a recommendation including an order of action taken in response to the electronic fraudulent event to one or more devices associated with a first set of device identifiers excluding the master perpetrator device and the accomplice device.
A non-transitory computer readable storage medium stored therein computer-readable instructions that, when executed, cause a processor for device identification in an electronic fraudulent event to perform steps of:
- calculating a plurality of proximity indicators each associated with a plurality of device identifiers, a first proximity indicator of the plurality of proximity indicators representing a likelihood of association between a first device and the electronic fraudulent event based at least in part on a comparison between device activity information associated with the first device and the electronic fraudulent event, wherein the first proximity indicator increases (i) if the first device is in use when the electronic fraudulent event occurs, or (ii) if device activity or account activity associated with the first device is similar to device activity or account activity associated with the electronic fraudulent event;
- based on the plurality of proximity indicators, identifying (i) a master perpetrator device associated with the electronic fraudulent event and associated with a first device identifier of the plurality of device identifiers and (ii) an accomplice device in support of the master perpetrator device and associated with a second device identifier of the plurality of device identifiers;
- and
- generating and transmitting a recommendation including an order of action taken in response to the electronic fraudulent event to one or more devices associated with a first set of device identifiers excluding the master perpetrator device and the accomplice device.
Dependencies are inferred from the claim text.