Fraud Intelligence - Person Fraud

Key Features:

Global Coverage
Data from multiple sources worldwide, including hard-to-reach markets, is available through a single integration.
Risk Insights
Predictive features and machine learning, powered by extensive personal data, advanced feature generation, and consortium data.
Tailored Solutions
A full-featured solution designed specifically for account opening, third-party fraud, and synthetic identity detection.
Onboarding Orchestration
Coordinated Person Verification using watchlist checks, and fraud

Request Parameters

Names and either a phone number or email are required with all other fields are optional, but every field helps improve predictiveness.

When submitting data to the Fraud Intelligence API, the following fields should be included in your request:

First Name
Last Name
Date of Birth
Email
Phone
Phone Country ISO Code
IP Address
Address Line 1
Address Line 2
City
Postal Code
State
Country
User Agent

Example Request

{
  "VerificationType": "Test",
  "PackageId":"f84f09f0-213a-4499-8370-29f371edddd",
  "CleansedAddress": false,
  "CountryCode": "US",
  "DataFields": {
    "PersonInfo": {
        "FirstGivenName": "Andrew",
        "FirstSurName": "Smith",
        "YearOfBirth": "1990"
    },
    "Location": {
        "AdditionalFields": {
            "Address1": "123 Main"
        }
    },
    "Communication": {
            "Telephone": "+9999999982",
            "EmailAddress": "[email protected]"
    },
    "CountrySpecific": {
            "US": {
                "IPAddress": "0.0.0.0"
            }
    }
  },
  "VerboseMode": true
}

Request and Response Structure

Upon submitting a request, the API will return a response containing several key elements. These elements provide insight into the potential risks associated with the submitted data:

📘
Score: A risk score, including the type of score, associated reason codes, and the overall risk level.

Input

Customer Configuration

Field	Description	Required (Y/N)	Field Type	Notes
Product	Product category to do fraud check for a company with multiple products (Prepaid gift cards, loans, etc...)	No	String	If the company has multiple products, the product that this request originates from (e.g. mortgages, loans, seller onboarding etc., )
Channel	Channel where information was collected (online, App, Phone, etc...)	No	String	Channel where information was collected (Online, App, Phone, In-Person, etc...)
UseCase	Use case of fraud check (3rd Party Application Fraud, Synthetic ID checks, Seller onboarding, Maintenance, etc...)	No	String

Data Class: N/A

Field	Description	Required (Y/N)	Field Type	Notes
TransactionID	ID of the transaction provided by Trulioo GG	Yes	String	Unique ID for the transaction ID, generated by Trulioo. Key used to map back to the transaction when feedback data is provided. This field is also returned in the response
UserID	End user ID which Trulioo's customer identifies their end user	No	String	This can hold things like an applicant ID, application ID, transaction ID, etc.
FirstGivenName	First name of the individual to be verified	Yes	String
FirstSurName	Last name of the individual to be verified	Yes	String
NationalID	National ID Number	No	String
EmailAddress	Email Address	Yes*	String	One of Email or Telephone is required
Telephone	Telephone number of the individual to be verified	Yes*		One of Email or Telephone is required
IPAddress	IP Address, either in IPv4 or IPv6 format	No
UserAgent	The User Agent of the end user	No
Referer	TBD	No

Date of Birth

Field	Description	Required (Y/N)	Field Type
DayOfBirth	Day of birth date (ie 23 for a date of birth of 23/11/1975)	No	DD
MonthOfBirth	Month of birth date (ie 11 for a date of birth of 23/11/1975)	No	MM
YearOfBirth	Year of birth date (ie 1975 for a date of birth of 23/11/1975)	No	YYYY

Address

Field	Description	Required (Y/N)
Address1 OR UnitNumber, BuildingName, BuildingNumber, HouseNumber, StreetNumber, CivicNumber, StreetName, StreetType	Street address of primary residence	No
UnitNumber HouseExtension		No
City	City of primary residence	No
PostalCode	ZIP Code or Postal Code of primary residence	No
StateProvinceCode	State of primary residence. US sources expect 2 characters. Australian sources expect 2 or 3 characters.	No
Country	Country of physical address (ISO 3166-1 alpha-2)	No

Device

Field	Description	Required (Y/N)
DevicePlugIns	TBD	No
DeviceTimeZone	TBD	No
DeviceLanguage	TBD	No
DeviceColorDepth	TBD	No
DeviceScreenResolution	TBD	No

Output

Score

Field	Description	Field Type	Field Values	Notes
Score	Risk Score	Integer	0-1000	Trulioo Risk Score reflects the risk rating for a transaction. Higher scores indicate higher risk of potential fraud.
ScoreType	Type of Fraud associated with risk score (3rd party fraud and synthetic fraud)	String	“Fraud”	This is defaulted to indicate “Fraud”. Should we be providing multiple scores, we will elaborate the score based on the type of fraud e.g. score = 750 score type = 3rd party fraud
ReasonCodes	List of reason codes related to input data	String		See Reference object details below for a full list of reason codes we provide
RiskLevel	Risk category based on the Risk Score.	String	- Very Low -Low<br -Medium -High -Very High	Very Low: Score = 0 to 3 Low: Score = 4 to 39 Medium: Score = 40 to 150 High: Score = 151 to 799 Very High: Score = 800 to 1000

Email Info

Field	Description	Field Type	Field Values	External Notes
EmailToName	The match status between the input name and the email address	String	-match -no match -not found	Identify whether input name is associated with the input email.
EmailFirstSeen	The date when the input email address was first observed	Date	YYYY-MM-DD	Date when the input email address was first observed. If the input email has not been observed before, the date will be today
EmailValid	Indicates whether the email address provided is a valid and functional email	String	-valid -invalid -unknown -null	Ex: Google LLC. This is typically useful when associated with a non-free email. Example: [email protected]
EmailType	Indicates whether the email address provided belongs to a free email service provider or a company / paid account.	String	-is_free -business_website_exists -business_no_website -null
EmailIsDisposable	Indicates whether the email address provided belongs to a temporary email service provider	Boolean	-true -false -null
EmailDomainCreationDate	The date when the email domain was created	Date	-Date -null	Format: YYYY-MM-DD Ex: 2011-06-29
EmailDomainRegisteredTo	Indicates the individual or entity registered to the email domain	String	-String -Null	Ex: Google LLC. This is typically useful when associated with a non-free email. Example: [email protected]
IsRandomlyGenerated	Indicates whether the email address provided is randomly generated	Boolean	Boolean	An example email would be [email protected]
EmailHandleApplicantNameMatch	Indicates whether the email handle contains the input name	Boolean	Boolean
EmailHandleAnomalous	Indicates whether the email handle is anomalous	Boolean	Boolean	This field indicates if email handle isn’t normally created by human
EmailOrganizationType	Indicates whether the email address is from corporate, university or government	String	String	This field is generated by using lookups against a list of major institutions … not only the top level domain. Corporate is based on most of the US Fortune 500 for example.

Email Linked Accounts

Field	Description	Field Type	Field Values	Notes
EmailNetworkingAccountsCount	Number of networking accounts have been linked to the email address	Integer	Integer
EmailEcommerceAccountsCount	Number of ecommerce accounts have been linked to the email address	Integer	Integer
EmailMessagingAccountsCount	Number of messaging accounts have been linked to the email address	Integer	Integer
EmailOtherAccountsCount	Number of other accounts have been linked to the email address	Integer	Integer
EmailAllAccountsCount	Total number of accounts have been linked to the email address	Integer	Integer	Generally we find that users personal emails are associated with a number of different accounts. Fraudulent or throwaway emails rarely have this characteristic.

Phone

Field	Description	Field Type	Field Values	Notes
PhoneToName	The match status between the input name and the phone number provided	String	- Match - No match - Not found - Null	Input first and last name provided are associated to the phone number
PhoneLineType	The line type of phone number	String	- Landline - Mobile - VOIP - Toll-Free - Landline - Unknown - Other	Unknown is usually due to invalid

Phone Info

Field	Description	Field Type	Field Values	Notes
PhoneValid	Indicates whether the phone provided is a valid	Boolean	-True -False -Null
PhoneCarrier	Indicates the phone carrier associated with the input phone number	String	-String -Null	Ex: T-Mobile US
PhoneIsDisposable	Indicates whether the input phone number belongs to a temporary phone service provider	Boolean	-True -False -Null
PhoneDisposableProviderName	The provider when it is a disposable phone #	String	-String -Null
LastPortDate	Indicates the date of the last portability event of input phone number	Date	-Date -Null	Very recent port dates are higher risk.
IsBusiness	Indicates whether the caller type of input phone number is business	Boolean	-True -False -Null	US only

Phone Linked Accounts

Field	Description	Field Type	Field Values	External Notes
PhoneNetworkingAccountsCount	Number of networking accounts have been linked to the input phone number	Integer	0,1,2, etc…
PhoneEcommerceAccountsCount	Number of ecommerce accounts have been linked to the input phone number	Integer	0,1,2, etc…
PhoneOtherAccountsCount	Number of other accounts have been linked to the input phone number	Integer	0,1,2, etc…
PhonePlatformAccountsCount	Number of platform accounts have been linked to the input phone number	Integer	0,1,2, etc…
PhoneCallingAccountsCount	Number of calling accounts have been linked to the input phone number	Integer	0,1,2, etc…
PhoneAllAccountsCount	Total number of accounts have been linked to the email address	Integer	0,1,2, etc…	Generally we find that users personal phone is associated with a number of different accounts. Fraudulent or throwaway emails rarely have this characteristic.

IP Categories

Field	Field Description	Type	Field Values	External Notes
Proxy	Indicates whether the input IP address is from a proxy	Boolean	-True -False -Null
ProxyType	The type of proxy from the input IP Address	String	-Datacenter -Residential -Rotating -Unknown -Null
Tor	Indicate whether the input IP address is associated to TOR	Boolean	-True -False -Null
VPN	Indicate whether the input IP Address is under a VPN	Boolean	-True -False -Null
VPNName	The name of VPN provider	String	-String -Null	Ex: Norton Secure VPN
BlacklistCount	Number of providers that have flagged the input IP Address as spam, suspicious traffic, etc…)	Integer	0,1,2, etc...
CloudHost	Indicate whether the input IP Address is from a hosted network	Boolean	-True -False -Null
IsRelay	Indicate whether the input IP Address configured to act as relay	Boolean	-True -False -Null

IP Geo

Field	Description	Type	Field Values
IPCountry	The name of the country where the the input IP Address is located (format is ISO 3166 alpha-2)	String	-String -Null
IPCity	The city where the input IP address is located	String	-String -Null
IPPostalCode	The postal code where the input IP Address is located	String	-String -Null

IP Info

Field	Description	Type	Field Values	Notes
IPConnectionType	The usage classification type of Internet service provider (ISP) that owns the input IP Address	String	-String -Commercial -Content Delivery Network -Fixed Line -Mobile ISP -Reserved -University -Null	University Indicates whether the input IP address is from a proxy/ College / School
ISPName	The name of the internet service provider that owns the input IP Address	String	-String -Null	Ex: Ignite Visibility
IPCompanyDomain	The name of the domain of the company that registered to the input IP Address	String	-String -Null	Ex: google.com
IPCompanyName	The name of the company that registered to the input IP Address	String	-String -Null	Ex: Apple Inc.

Features Velocity

Field	Description	Type	Field Values	Notes
VelocityOfEmailToDistinctPerson	Number of times that the input email address is linked to the unique persons	Integer	0,1,2, etc…	Indicates how many times we see the input email address is submitted with the input name under the same transaction
VelocityOfPhoneToDistinctPerson	Number of times that the input phone is linked to the unique persons	Integer	0,1,2, etc…	Indicates how many times we see the input phone number is submitted with the input name under the same transaction
VelocityOfAddressToDistinctPerson	Number of times that the input address is linked to the unique persons	Integer	0,1,2, etc…	Indicates how many times we see the input primary address is submitted with the input name under the same transaction

Features Fraud Linkages

Field	Description	Type	Field Values
NegAddress	Indicates whether the input address is reported as fraud previously	Boolean	-True -False
NegPhone	Indicate whether the input phone number is reported as fraud previously	Boolean	-True -False
NegEmail	Indicate whether the input email address is reported as fraud previously	Boolean	-True -False
NegIP	Indicate whether the input IP address is reported as fraud previously	Boolean	-True -False

Reference - Reason Code

Field	Description	Type	Field Values
PhoneToIPCountry	Indicate whether the country associated with the input phone number matches the country associated with the input IP Address	Boolean	-True -False
EmailAndPhoneLinked	Indicate whether the input email address and input phone number are linked to each other	Boolean	-True -False
EmailLinkedToDifferentPhone	Indicate whether the input email address is associated to a different phone number	Boolean	-True -False
PhoneLinkedToDifferentEmail	Indicate whether the input phone number is associated to a different email address	Boolean	-True -False
EmailToPhoneProfileImage	Indicate whether all profile pictures obtained from both input email address and input phone number sources exhibit faces are match	Boolean	-True -False

Additional Features

The API also includes advanced features such as:

Velocity Checks:

Email Velocity: The frequency of the email being linked to various identities.
Phone Velocity: Similar to email velocity, but for phone numbers.
IP Velocity: Frequency of the IP being linked to various identities.

Fraud Linkage:

Negative Phone: Returns information if the phone number is flagged as fraudulent.
Fraudulent Email: Indicates if the email is associated with fraudulent activities.

Key Features:

Request Parameters

Example Request

Request and Response Structure

📘Score: A risk score, including the type of score, associated reason codes, and the overall risk level.

Input

Customer Configuration

Data Class: N/A

Date of Birth

Address

Device

Output

Score

Email Info

Email Linked Accounts

Phone

Phone Info

Phone Linked Accounts

IP Categories

IP Geo

IP Info

Features Velocity

Features Fraud Linkages

Reference - Reason Code

Additional Features

Velocity Checks:

Fraud Linkage:

📘
Score: A risk score, including the type of score, associated reason codes, and the overall risk level.