CPC G06F 21/55 (2013.01) [G06F 21/552 (2013.01); G06F 21/577 (2013.01); G06Q 30/00 (2013.01); G06Q 40/02 (2013.01)] | 18 Claims |
1. A system for device identification in an electronic fraudulent event, the system comprising:
a web server for comprising one or more processors configured to execute at least a portion of a fraud containment system; and
a memory for storing computer instructions of the fraud containment system, the computer instructions, when executed, causing the one or more processors of the web server to:
calculate a plurality of proximity indicators each associated with a plurality of device identifiers, a proximity indicator representing a likelihood of association between a device and the electronic fraudulent event based at least in part on a comparison between device activity information associated with the device and the electronic fraudulent event;
based on the plurality of proximity indicators, identify (i) a master perpetrator device associated with the electronic fraudulent event and associated with a first device identifier of the plurality of device identifiers and (ii) an accomplice device in support of the master perpetrator device and associated with a second device identifier of the plurality of device identifiers;
execute an automated search on a first electronic repository using the plurality of proximity indicators to identify a first set of device identifiers;
generate a risk score for each of the first set of device identifiers, the risk score representing a first confidence level indicating a likelihood that a given device identifier of the first set of device identifiers is associated with a victim of the electronic fraudulent event; and
generate and transmit a recommendation including an order of action taken in response to the electronic fraudulent event to one or more devices associated with the first set of device identifiers excluding the master perpetrator device and the accomplice device,
wherein a proximity indicator of a device increases (i) in response to the device is in use when the electronic fraudulent event occurs, or (ii) if device activity or account activity associated with the device is similar with or mirrors device activity or account activity associated with the electronic fraudulent event.
|