DEVICE FINGERPRINTING

1 . A system, comprising:

a memory device storing user account information, wherein the user account information comprises a device identifier (ID) associated with a user account; and

one or more processors in communication with the memory device and operable to:

collect identifying information regarding a user device;

create a device identifier (ID) based on the identifying information;

generate a session key that is associated with a transaction;

associate the session key with the device ID;

store the session key with the device ID;

receive the session key from a merchant;

retrieve the device ID;

determine a number of users associated with the device ID; and

based on the number, assess a risk of fraud for the transaction.

2 . The system of claim 1 , wherein the identifying information comprises at least one of an IP address, a local time, a local time zone, a browser user-agent, and a font type.

3 . The system of claim 1 , wherein the one or more processors is further operable to cause the device ID to be stored on the user device as persistent data.

4 . The system of claim 3 , wherein the persistent data comprises a cookie or information that is secured against alteration.

5 . The system of claim 1 , wherein the one or more processors is further operable to reject the transaction if the number of users associated with the device ID exceeds a predetermined number.

6 . The system of claim 5 , wherein the predetermined number is 3 or more users.

7 . The system of claim 1 , wherein the one or more processors is further operable to restrict the scope of the transaction if the number of users associated with the device ID exceeds a predetermined number.

8 . The system of claim 1 , wherein the transaction comprises purchase amount, transfer amount, type of transfer requested, item or service purchased, or a combination thereof

9 . A method for detecting fraud, comprising:

collecting, by one or more hardware processors of a service provider, identifying information regarding a user device;

creating a device identifier (ID) based on the identifying information;

generating a session key that is associated with a transaction;

associating the session key with the device ID;

storing the session key with the device ID;

receiving the session key from a merchant;

retrieving the device ID;

determining a number of users associated with the device ID; and

based on the number, assessing a risk of fraud for the transaction.

10 . The method of claim 9 , wherein the identifying information comprises at least one of an IP address, a local time, a local time zone, a browser user-agent, and a font type.

11 . The method of claim 9 , further comprising causing the device ID to be stored on the user device as persistent data.

12 . The method of claim 11 , wherein the persistent data comprises a cookie or information that is secured against alteration.

13 . The method of claim 9 , further comprising rejecting the specific transaction if the number of users associated with the device ID exceeds a predetermined number.

14 . The method of claim 13 , wherein the predetermined number is 3 or more users.

15 . The method of claim 9 , further comprising restricting the scope of the transaction if the number of users associated with the device ID exceeds a predetermined number.

16 . A non-transitory machine-readable medium comprising a plurality of machine-readable instructions which, when executed by one or more processors, are adapted to cause the one or more processors to perform a method comprising:

collecting identifying information regarding a user device;

creating a device identifier (ID) based on the identifying information;

generating a session key that is associated with a transaction;

associating the session key with the device ID;

storing the session key with the device ID;

receiving the session key from a merchant;

retrieving the device ID;

determining a number of users associated with the device ID; and

based on the number, assessing a risk of fraud for the transaction.

17 . The non-transitory machine-readable medium of claim 16 , wherein the identifying information comprises at least one of an IP addresses, a local time, a local time zone, a browser user-agent, and a font type.

18 . The non-transitory machine-readable medium of claim 16 , wherein the method further comprises causing the device ID to be stored on the user device as persistent data, and the persistent data comprises a cookie or information that is secured against alteration.

19 . The non-transitory machine-readable medium of claim 16 , wherein the method further comprises rejecting the transaction or limiting the scope of the transaction if the number of users associated with the device ID exceeds a predetermined number.

20 . The non-transitory machine-readable medium of claim 19 , wherein the predetermined number is 3 or more users.