System and method for fraud monitoring, detection, and tiered user authentication

A system comprising:

• a processing component configured to:
• receive an access request originating from a client device;
• gather identifying information concerning the client device;
• retrieve risk information from a device central repository (DCR), the risk information identifying a risk that the access request is fraudulent;
• determine authentication interface selection criteria based on the identifying information and the risk information;
• select a graphical authentication user interface from a plurality of graphical authentication user interfaces based on the authentication interface selection criteria,
• wherein each of the plurality of graphical authentication user interfaces is a variation of a single user interface and includes one or more distinct graphical elements for entering authentication information,
• the distinct graphical elements are variations of corresponding elements of the single user interface, and
• the selected graphical authentication user interface has a level of security commensurate to the risk identified in the risk information;
• cause the graphical authentication user interface to be presented at the client device;
• determine whether to authenticate the access request based on information entered at the client device in response to the presented graphical authentication user interface;
• and
• update the risk information stored in the DCR based on authentication results for the access request.

A non-transitory computer-readable storage medium having stored thereon program code executable by a computer system, the program code comprising:

• code that causes the computer system to receive an access request originating from a client device communicatively coupled with the computer system;
• code that causes the computer system to identify information concerning the client device;
• code that causes the computer system to retrieve risk information from a device central repository (DCR), the risk information identifying a risk that the access request is fraudulent;
• code that causes the computer system to determine authentication interface selection criteria based on the identifying information and the risk information;
• code that causes the computer system to select a graphical authentication user interface from a plurality of graphical authentication user interfaces based on the authentication interface selection criteria,
• wherein each of the plurality of graphical authentication user interfaces is a variation of a single user interface and includes one or more distinct graphical elements for entering authentication information,
• the distinct graphical elements are variations of corresponding elements of the single user interface, and
• the selected graphical authentication user interface has a level of security commensurate to the risk identified in the risk information;
• code that causes the computer system to send the graphical authentication user interface to the client device, wherein the graphical authentication user interface is presented at the client device;
• code that causes the computer system to determine whether to authenticate the access request based on information entered at the client device in response to the presented graphical authentication user interface;
• and
• code that causes the computer system to update the risk information stored in the DCR based on authentication results for the access request.