Network Risk Signals
etwork Signals is one of Trulioo’s Risk Insights available to our customers to help detect and prevent fraud based on the network information of your users. Trulioo intakes network information such as IP addresses, email, and telephone to detect if your users are authentic.
Network Signals is constructed using the browsing habits of the US population across the internet. The model evaluates risk based on how closely the browsing behavior of the session user matches the browsing behavior of the account holder. This data is based on a variety of online websites and is then consolidated and transformed into individual identities.
Within each identity, you have the following information which comprises an individual:
- Phone
- IP Address
- Address
- Browser Information
- Device Information
This information is then compared to the provided information of the user at the moment of account opening to help calculate risk. The level of overlap between the two pieces of information helps Trulioo determine the risk score for the individual.
Network Signals Request
Request Fields
| Parameter | Parameter Description |
|---|---|
| Address | Address |
| Mobile | Phone number |
| Email Address | |
| IP | IP address of user |
| userAgent | User Agent information from user’s browser |
| deviceID | Device ID information from user’s device |
Sample API Request
{
"DataFields": {
"PersonInfo": {
"Address1":"Wool's Orphanage",
},
"RiskInfo":{
"IP": "12.345.6.78",
"Phone": "1112223333",
"Email": "[email protected]",
"UserAgent":"Mozilla/5.0",
"DeviceID":"3e409930-7825-427d-b75e-449ea0f6a4d5"
}
},
"AcceptTruliooTermsAndConditions": true,
"CountryCode": "US",
"VerboseMode": "True"
}
Network Signals Response
Response Fields
| Parameter Name | Parameter Description |
|---|---|
| NetworkScore | Score of Network Signals model |
| NetworkDetails | Select Details from Network Signals model which impacted score |
| NetworkSignals | Relevant Signals for decision making beyond score |
NetworkDetails Fields
| Parameter Name | Parameter Description |
|---|---|
| Device | Information about the login device using the DeviceID and UserAgent |
| Geo | Geolocation Information derived from the IP Address |
| Network | Network Information derived from the IP Address |
NetworkSignals Fields
| Parameter Name | Parameter Description |
|---|---|
| Trust | Familiarity details about user such as user match for Email/IP or common geography for user |
| Info | Additional Details around Identity and Device such as Device age or if it is a mobile network |
| Risk | Risk flags about Identity such as new IP address for user or impossible travel distance |
Sample API Response
{
"TransactionID": "f9de9726-707d-4eec-9c94-3f5b6ee926d0",
"UploadedDt": "2023-04-26T16:28:37.211295",
"CompletedDt": "2023-04-26T16:28:39.50633",
"CountryCode": "US",
"ProductName": "Identity Verification",
"Record": {
"TransactionRecordID": "20793047-47d4-6f2e-c9d0-6f075cb23d21",
"RecordStatus": "nomatch",
"DatasourceResults": [
{
"DatasourceName": "Trulioo Anomaly Detection",
"DatasourceFields": [],
"AppendedFields": [
{
"FieldName": "RiskScore",
"Data": {
"RiskLevel": "Low",
"Score": 24
}
},
{
"FieldName": "RiskDetails",
"Data": {
"VelocityMonitorScore": {
"RiskLevel": "Low",
"Score": 3
},
"IdentityGraphScore": {
"RiskLevel": "Low",
"Score": 0
}
}
},
{
"FieldName": "RiskSignals",
"Data": {
"VelocityMonitor": {
"IdentitiesSeen": 6,
"DaysIdentitySeen": 2,
"AccountCreationInterval": 276,
"AccountsCreatedPerDay": 2,
"RoboticFraudAccountsPercentage": 0,
"HybridFraudAccountsPercentage": 0.66666666666666663,
"HumanFraudAccountsPercentage": 0.66666666666666663,
"CrossBorderFraud": false,
"CrossIndustryFraud": false
},
"IdentityGraph": {
"EmailDiscrepancy": false,
"AddressDiscrepancy": true,
"PhoneDiscrepancy": false,
"DoBDiscrepancy": false,
"EmailDoBMatch": true,
"PhoneDoBMatch": true,
"IDNumberDoBMatch": true
}
}
},
{
"DatasourceName": "Network Signals",
"DatasourceFields": [],
"AppendedFields": [
{
"FieldName": "NetworkScore",
"Data": "LOW_RISK"
},
{
"FieldName": "NetworkDetails",
"Data": [
"trust": [
"ADDRESS_GEOIP_MATCH"
],
"info": [
"NETWORK_MOBILE",
"ACTIVITY_INFREQUENT_GEO_COUNTRY"
],
"risk": [
"ACTIVITY_NEW_IP",
"ACTIVITY_NEW_SUBNET",
"ACTIVITY_NEW_NETWORK",
"ACTIVITY_NEW_GEO_CITY",
"ACTIVITY_NEW_GEO_STATE",
"ACTIVITY_NEW_GEO_TIMEZONE"
]
]
},
{
"FieldName": "NetworkSignals",
"Data": [
"device": {
"ua_brand": null,
"ua_browser": null,
"ua_device_type": null,
"ua_name": null,
"ua_os": null,
"ua_type": null,
"ua_version": null
},
"geo": {
"country": "US",
"state": "Texas",
"city": "Dallas",
"lat": "32.7831",
"long": "-96.8067"
},
"network": {
"isp_asn": "AS20057",
"isp_name": "AT&T Mobility LLC",
"company_name": "AT&T Mobility LLC",
"vpn_name": null,
"is_vpn_confirmed": false,
"is_vpn_suspect": false,
"is_vpn_capable": false,
"is_tor": false,
"is_hosting": false,
"is_corporate": false,
"is_education": false,
"is_mobile": true,
"is_proxy_reported": false,
"is_proxy_public": false,
"is_proxy_rotating": false,
"bot_name": null,
"crawler_name": null
}
]
}
],
"Errors": [],
"FieldGroups": []
}
],
"Errors": [],
"Rule": {
"RuleName": "Category 3 KYC v3",
"Note": "Match(FamilyAndGivenInitial, DOB) or Match(FamilyAndGivenInitial, FullAddress) or Match(FamilyAndGivenInitial, ID) MiddleName Ignored"
}
},
"Errors": []
}
Updated 7 months ago