Fraud deterrence for secure transactions
An illustrative fraud deterrent method includes presenting an identity verification option for a first website displayed in a web-browser, the option including offering a login to a third-party website, unrelated to the first website. The method further includes receiving login information for a first user account on the third-party website and verifying the login information through a verification service associated with the third-party website, to verify that the login information is valid for the first user account, identified by the login information. The method additionally includes verifying an identity at the first website, responsive to the verification.
1. A method comprising:
receiving a request from a first device, for a secure internet transaction at a website;
responsive to the request, presenting an identity verification option to verify an identity, including at least a first option to use an out-of-band device, different from the first device and previously associated with the identity, and at least one second option providing an identity verification alternative to use of the out-of-band device;
responsive to election of the first option, sending a message to the out-of-band device including a confirmation code;
receiving input of the confirmation code as evidence of possession of the out-of-band device; and
verifying the identity based on the input confirmation code corresponding to the sent confirmation code.
2. The method of claim 1 , wherein the verification option is presented additionally responsive to determining that the first device is not recognized as authorized for use in completion of the secure transaction.
3. The method of claim 1 , wherein the secure internet transaction includes at least a login attempt using the first device.
4. The method of claim 1 , wherein the out-of-band device includes a cellular phone.
5. The method of claim 1 , wherein the message includes a text message.
6. The method of claim 1 , wherein the out-of-band device is associated with the identity based on information stored in a user profile associated with the website.
7. The method of claim 1 , wherein the verification option is presented additionally responsive to determining that the first device is not recognized as authorized for use in completion of the secure transaction, based on a user profile associated with the website and defining at least one device authorized for use in completion of the secure transaction.
8. A non-transitory storage medium, storing instructions that, when executed by one or more processors, cause the one or more processors to perform a method comprising:
receiving a request from a first device, for a secure internet transaction at a website;
responsive to the request, presenting an identity verification option to verify an identity, including at least a first option to use an out-of-band device, different from the first device and previously associated with the identity, and at least one second option providing an identity verification alternative to use of the out-of-band device;
responsive to election of the first option, sending a message to the out-of-band device including a confirmation code;
receiving input of the confirmation code as evidence of possession of the out-of-band device; and
verifying the identity based on the input confirmation code corresponding to the sent confirmation code.
9. The non-transitory storage medium of claim 8 , wherein the verification option is presented additionally responsive to determining that the first device is not recognized as authorized for use in completion of the secure transaction.
10. The non-transitory storage medium of claim 8 , wherein the secure internet transaction includes at least a login attempt using the first device.
11. The non-transitory storage medium of claim 8 , wherein the out-of-band device includes a cellular phone.
12. The non-transitory storage medium of claim 8 , wherein the message includes a text message.
13. The non-transitory storage medium of claim 8 , wherein the out-of-band device is associated with the identity based on information stored in a user profile associated with the website.
14. The non-transitory storage medium of claim 8 , wherein the verification option is presented additionally responsive to determining that the first device is not recognized as authorized for use in completion of the secure transaction, based on a user profile associated with the website and defining at least one device authorized for use in completion of the secure transaction.
15. A system comprising:
one or more processors configured to:
receive a request from a first device, for a secure internet transaction at a website;
responsive to the request, present an identity verification option to verify an identity, including at least a first option to use an out-of-band device, different from the first device and previously associated with the identity, and at least one second option providing an identity verification alternative to use of the out-of-band device;
responsive to election of the first option, send a message to the out-of-band device including a confirmation code;
receive input of the confirmation code as evidence of possession of the out-of-band device; and
verify the identity based on the input confirmation code corresponding to the sent confirmation code.
16. The system of claim 15 , wherein the verification option is presented additionally responsive to determining that the first device is not recognized as authorized for use in completion of the secure transaction.
17. The system of claim 15 , wherein the secure internet transaction includes at least a login attempt using the first device.
18. The system of claim 15 , wherein the out-of-band device includes a cellular phone.
19. The system of claim 15 , wherein the message includes a text message.
20. The system of claim 15 , wherein the verification option is presented additionally responsive to determining that the first device is not recognized as authorized for use in completion of the secure transaction, based on a user profile associated with the website and defining at least one device authorized for use in completion of the secure transaction.