Method and system for detecting two-factor authentication

1. A method for assessing a fraud risk, comprising:

identify, by a web browser extension executing on a computing device, an account associated with the computing device;

based on the identifying, detecting, by the web browser extension, that the computing device navigated to a web page hosted by a third party server;

determining, by the web browser extension, that the third party server prompted the computing device to opt into two-factor authentication functionality during a log-in operation on the web page;

determining, by the web browser extension, that the computing device did not opt into the two-factor authentication functionality; and

based on the determining, prompting, by the browser extension via an application programming interface (API), an organization computing system to update a fraud metric associated with the account without preventing the computing device from a the web page hosted by the third party server.

2. The method of claim 1 , wherein, prompting, by the browser extension application via the API, the organization computing system to update the fraud metric associated with the account, comprises:

increasing a sensitivity of a fraud algorithm associated with the account.

3. The method of claim 2 , wherein increasing the sensitivity of the fraud algorithm associated with the account, comprises:

determining that a type of website is a website associated with a financial institution; and

increasing the sensitivity of the fraud algorithm associated with the account by a first amount.

4. The method of claim 2 , wherein increasing the sensitivity of the fraud algorithm associated with the account, comprises:

determining that a type of website is a website not associated with a financial institution; and

increasing the sensitivity of the fraud algorithm with the account by a first amount that is less than an amount associated with a financial institution website.

5. The method of claim 1 , further comprising:

receiving, at the browser extension application, a message from the organization computing system to be transmitted to the computing device, the message comprising a suggestion to opt into two-factor authentication functionality; and

prompting, by the web browser extension, a user of the computing device to opt into the two-factor authentication functionality.

6. The method of claim 5 , further comprising:

detecting, by the web browser extension, that the computing device has opted into the two-factor authentication functionality following receipt of the message; and

prompting, by the web browser extension via the API, the organization computing system to further update the fraud metric associated with the account.

7. The method of claim 6 , wherein, prompting, by the web browser extension via the API, the organization computing system to further update the fraud metric associated with the account, comprises:

decreasing a sensitivity of a fraud algorithm associated with the account.

8. A system, comprising:

a processor executing a web browser extension; and

a memory having programming instructions and the web browser extension stored thereon, the web browser extension, when executed by the processor, performs an operation, comprising:

identifying, by the web browser extension, an indication of an account associated with a computing device;

based on the identifying, detecting, by the web browser extension, that the computing device navigated to a web page hosted by a third party server;

determining, by the web browser extension, that the third party server prompted the computing device to perform an authorization operation during a log-in operation on the web page;

determining, by the web browser extension, that the authorization operation with the third party server does not include two-factor authentication functionality; and

based on the determining, prompting, by the web browser extension via an application programming interface (API), an organization computing system to update a fraud metric associated with the account without preventing the computing device from accessing the web page hosted by the third party server.

9. The system of claim 8 , wherein, prompting, by the web browser extension via the API, the organization computing system to update the fraud metric associated with the account, comprises:

increasing a sensitivity of a fraud algorithm associated with the account.

10. The system of claim 9 , wherein increasing the sensitivity of the fraud algorithm associated with the account, comprises:

determining that a type of website is a website associated with a financial institution; and

increasing the sensitivity of the fraud algorithm associated with the account by a first amount.

11. The system of claim 9 , wherein increasing the sensitivity of the fraud algorithm associated with the account, comprises:

determining that a type of website is a website not associated with a financial institution; and

increasing the sensitivity of the fraud algorithm with the account by a first amount that is less than an amount associated with a financial institution website.

12. The system of claim 8 , further comprising:

receiving a message from the organization computing system to be transmitted to the computing device, the message comprising a suggestion to opt into two-factor authentication functionality; and

prompting, by the web browser extension, a user of the computing device to opt into two-factor authentication functionality.

13. The system of claim 12 , further comprising:

detecting, by the web browser extension, that the computing device has opted into the two-factor authentication functionality following receipt of the message; and

prompting, by the web browser extension via the API, the organization computing system to further update the fraud metric associated with the account.

14. The system of claim 12 , wherein, prompting, by the browser extension application via the API, the organization computing system to further update the fraud metric associated with the account, comprises:

decreasing a sensitivity of a fraud algorithm associated with the account.

15. A method for assessing a fraud risk, comprising:

identifying, by a web browser extension executing on a computing device, an account associated with the computing device;

based on the identifying, detecting, by the web browser extension, that the computing device navigated to a web page hosted by a third party server;

identifying, by the web browser extension, a document object model generated by a web browser executing on the computing device;

parsing, by the web browser extension, the document object model to determine whether the computing device has opted into two-factor authentication functionality with the third party web server during a log-in operation on the web page;

determining, by the web browser extension, that the computing device did not opt into the two-factor authentication functionality; and

based on the determining, notifying, by the web browser extension, an organization computing system that the computing device did not opt into the two-factor authentication functionality without preventing the computing device from accessing the web page hosted by the third party server.

16. The method of claim 15 , wherein the document object model is an object oriented representation of the web page.

17. The method of claim 15 , wherein parsing, by the web browser extension, the document object model to determine whether the computing device has opted into the two-factor authentication functionality with the third party web server, comprises:

injecting, by the web browser extension, JavaScript associated therewith into the web page.

18. The method of claim 15 , wherein determining, by the web browser extension, that the computing device did not opt into the two-factor authentication functionality, comprises:

identifying a pop-up window corresponding to an authorization request between the computing device and the third party server; and

determining that the authorization request did not include instructions for the two-factor authentication functionality.

19. The method of claim 15 , further comprises:

receiving, by the web browser extension from the organization computing system, a message to be displayed to the computing device, the message comprising a suggestion to opt into the two-factor authentication functionality; and

requesting, by the web browser extension, that the web browser render the message for display.

20. The method of claim 19 , further comprising:

determining, by the web browser extension, that the computing device opted into the two-factor authentication functionality; and

notifying, by the web browser extension, the organization computing system that the computing device opted into the two-factor authentication functionality.