Fraud deterrence for secure transactions
An illustrative fraud deterrent method includes presenting an identity verification option for a first website displayed in a web-browser, the option including offering a login to a third-party website, unrelated to the first website. The method further includes receiving login information for a first user account on the third-party website and verifying the login information through a verification service associated with the third-party website, to verify that the login information is valid for the first user account, identified by the login information. The method additionally includes verifying an identity at the first website, responsive to the verification.
1. A method comprising:
receiving a request from a first device, for a secure internet transaction at a website;
determining that the first device is not recognized as authorized for use in completion of the secure transaction, based on an electronic serial number associated with the first device not corresponding to any electronic serial numbers of one or more approved devices previously saved with respect to an identity associated with the request;
responsive to determining that the first device is not recognized, presenting an offer to verify the identity using an out-of-band device, different from the first device and corresponding to at least one of the electronic identifications of the approved devices;
responsive to acceptance of the offer, sending a message to the out-of-band device including a confirmation code;
receiving input of the confirmation code as evidence of possession of the out-of-band device; and
verifying the identity based on the input confirmation code corresponding to the sent confirmation code.
2. The method of claim 1 , wherein the secure internet transaction includes at least a login attempt using the first device.
3. The method of claim 1 , wherein the out-of-band device includes a cellular phone.
4. The method of claim 1 , wherein the message includes a text message.
5. The method of claim 1 , wherein the out-of-band device is determined based on information stored in a user-profile associated with the website and the identity.
6. The method of claim 5 , wherein the out-of-band device is chosen by the user from a list of approved authentication options associated with the identity.
7. A method comprising:
receiving a request from a first device, for a secure internet transaction at a website;
receiving an electronic identification associated with an origin of a request;
determining that the electronic identification does not correspond to any authenticated electronic identifications, saved with respect to a user profile, corresponding to a user identified based on the request, and expressly authorized by the user for completion of secure internet transactions on the website;
responsive to determining that the electronic identity is not recognized, presenting an offer to verify the identity using an approved device previously saved with respect to the identity;
responsive to acceptance of the offer, sending a message to the approved device including a confirmation code;
receiving input of the confirmation code as evidence of possession of the approved device; and
verifying the identity based on the input confirmation code corresponding to the sent confirmation code.
8. The method of claim 7 , wherein the secure internet transaction includes at least a login attempt using the first device.
9. The method of claim 7 , wherein the approved device includes a cellular phone.
10. The method of claim 7 , wherein the message includes a text message.
11. The method of claim 7 , wherein the approved device is determined based on information stored in a user-profile associated with the website and the identity.
12. The method of claim 11 , wherein the approved device is chosen by the user from a list of approved authentication options associated with the identity.
13. A system comprising:
one or more processors configured to:
receive a request from a first device, for a secure internet transaction at a website;
receive an electronic identification associated with the first device;
determine that an identity associated with the request should be verified based on a determination that the first device is not recognized as authorized for use in completion of the secure transaction, based on an electronic identification associated with the first device not corresponding to any electronic identifications of one or more approved devices, expressly approved by a user for completion of secure internet transactions with respect to the website and saved with respect to the identity associated with the request;
responsive to determining that the electronic identification is not recognized, present an offer to verify the identity using an approved device, corresponding to at least one of the electronic identifications of one or more approved devices previously saved with respect to the identity;
responsive to acceptance of the offer, send a message to the approved device including a confirmation code;
receive input of the confirmation code as evidence of possession of the approved device; and
verify the identity based on the input confirmation code corresponding to the sent confirmation code.
14. The system of claim 13 , wherein the secure internet transaction includes at least a login attempt using the first device.
15. The system of claim 13 , wherein the approved device includes a cellular phone.
16. The system of claim 13 , wherein the message includes a text message.
17. The system of claim 13 , wherein the approved device is determined based on information stored in a user-profile associated with the website and the identity.
18. The system of claim 17 , wherein the approved device is chosen by the user from a list of approved authentication options associated with the identity.
19. The system of claim 13 , wherein, at least when the first device is not recognized as authorized for use in completion of the secure transaction, the approved device is different from the first device and is out-of-band from the transaction.