Adjustment of knowledge-based authentication
Systems and methods are provided for adjustment of difficulty level, quantity, and/or other parameters of knowledge-based authentication. The questions may be asked of a consumer based on one or more generated risk scores associated with the consumer's behavior, which may be derived from information received from the consumer, a representative responsible for entering information regarding the consumer, and/or from the consumer's computing device.
1. A system comprising:
one or more processors; and
a non-transitory computer-readable storage medium storing computer-executable instructions that cause the one or more processors to:
receive device information associated with a computing device gathered through device information gathering code executed by the computing device, wherein the device information is received in response to a request for a service of a service provider, wherein the request is made from an individual alleging to be a particular consumer, wherein the device information includes at least one or more of:
a device identifier for the computing device,
geolocation of the computing device,
a characteristic of a browser operating on the computing device, or
information pertaining to a proxy service;
determine a fraud risk for the computing device or the request, wherein the fraud risk is determined at least in part by comparing the device information with information previously associated with the particular consumer, wherein an identity of the particular consumer is unknown to the service provider, wherein the fraud risk is based on one or more potential fraud behaviors derived from at least the device information;
determine that the fraud risk meets a predetermined risk threshold;
transmit to the service provider an indication of high risk associated with the computing device or the request; and
lock new account opening opportunities with respect to the particular consumer such that the system, while the lock remains in effect, prevents any new accounts with a plurality of service providers from being opened using identity information of the particular consumer.
2. The system of claim 1 , wherein the request for the service includes a request to open a bank account, wherein the service provider includes a bank.
3. The system of claim 1 , wherein the characteristic of the browser includes one or more of: a browser type, a browser time zone, or a browser language setting.
4. The system of claim 1 , wherein the device information includes the information pertaining to the proxy service, wherein the information pertaining to the proxy service is determined based on a stated IP address by the computing device and a real IP address of the computing device.
5. The system of claim 1 , wherein the fraud risk is further determined based on prior failed attempts for the particular consumer.
6. The system of claim 5 , wherein the fraud risk is further determined based on a number or a frequency of prior failed attempts for the particular consumer.
7. A computer-implemented method comprising:
receiving device information associated with a computing device gathered through device information gathering code executed by the computing device, wherein the device information is received in response to a request for a service of a service provider, wherein the request is made from an individual alleging that the individual is a particular consumer;
determining a fraud risk for the computing device or the request, wherein an identity of the particular consumer is unknown to the service provider, wherein the fraud risk is based on one or more potential fraud behaviors derived from at least the device information;
determining that the fraud risk meets a predetermined risk threshold;
transmitting to the service provider an indication of high risk associated with the computing device or the request; and
locking new account opening opportunities with respect to the particular consumer, wherein the locking includes preventing new accounts with a plurality of service providers from being opened using identity information of the particular consumer.
8. The method of claim 7 , wherein determining the fraud risk includes determining that an IP address for the computing device is a masked IP address.
9. The method of claim 7 , wherein the method further comprises, in response to the fraud risk meeting the predetermined risk threshold, initiating generation of user interface data to display on another computing device known to be associated with the particular consumer, wherein the user interface data indicates that a potentially fraudulent request was received.
10. The method of claim 7 , wherein the one or more potential fraud behaviors includes an identified anomaly between the device information and predetermined information in a profile associated with the particular consumer.
11. The method of claim 7 , wherein the one or more potential fraud behaviors comprises one or more of: frequent attempts to open a new account, requesting a new account from more than one computing device, having a device IP address that matches a known IP addresses associated with a high risk of fraud, or submitting a password that matches a unique password known to be related to a high risk of fraud.
12. The method of claim 7 , wherein the device information gathering code includes embedded instructions sent to the computing device to collect the device information, and to process information collected from the embedded instructions.
13. The method of claim 7 , wherein the method further comprises, based at least in part on the fraud risk of the particular consumer, sending a request to the computing device for further device identification information.
14. A non-transitory computer storage medium storing computer-executable instructions that, when executed by a processor, cause the processor to perform operations comprising:
receiving device information associated with a computing device gathered through device information gathering code executed by the computing device, wherein the device information is received in response to a request for a service of a service provider, wherein the request is made from an individual alleging that the individual is a particular consumer, wherein the device information includes at least one or more of:
a device identifier for the computing device,
a device geolocation,
a browser characteristic, or
use of a proxy service;
determining a fraud risk for the computing device or the request, wherein an identity of the particular consumer is unconfirmed by the service provider, wherein the fraud risk is based on one or more potential fraud behaviors derived from at least the device information;
determining that the fraud risk meets a predetermined risk threshold;
transmitting to the service provider an indication of high risk for the computing device or the request; and
locking new account opening opportunities with respect to the particular consumer, wherein the locking includes preventing new accounts with a plurality of service providers from being opened using identity information of the particular consumer.
15. The non-transitory computer storage medium of claim 14 , wherein the operations further comprise, in response to a determination that the particular consumer is not authenticated based on the fraud risk, transmitting an alert to a victim of authentication fraud.
16. The non-transitory computer storage medium of claim 14 , wherein the operations further comprise determining whether the particular consumer is authenticated based in part on a comparison between location information of the particular consumer with location information from the device information.
17. The non-transitory computer storage medium of claim 14 , wherein the operations further comprise transmitting to the computing device an authentication question set for display in one or more user interfaces by the computing device, wherein the authentication question set comprises one or more authentication questions, and wherein the one or more authentication questions are selected based at least in part on the fraud risk.
18. The non-transitory computer storage medium of claim 14 , wherein the operations further comprise dynamically adjusting the authentication question set based on a user response to at least a first question.