Fraud API

SEON's proprietary API combines our email, phone number, IP, BIN, and AML APIs with device fingerprinting so that you can request and receive our enriched data, rules, and scoring in a single API call.

Good to know

The API is fully modular, meaning you can choose to enable or disable each sub-APIs (Email, Phone, IP, or AML) or the device fingerprinting tool. Use the config object to enable or disable modules.
You can use the custom_fields object to send almost any custom data point to SEON. Your team can also use custom fields in rules to create a completely custom ruleset.
All SEON API requests are case-sensitive. Please follow the formatting below to avoid errors.
It's recommended to populate all user name related fields as much as possible (user_fullname, user_firstname, user_middlename, user_lastname)

If you are using our US Transaction Processing Environment please use the correct endpoint: https://api.us-east-1-main.seon.io/SeonRestService/fraud-api/v2/

For more context on how to begin your API integration check the Introduction section or our Integration Guide.

Request

Request Attributes	Type	Required
config	object	no

action_type	string	no

ip	string	no

transaction_id	string	no

affiliate_id	string	no

affiliate_name	string	no

order_memo	string	no

email	string	no

email_domain	string	no

payment_id	string	no

password_hash	string	no

user_fullname	string	no

user_name	string	no

user_firstname	string	no

user_middlename	string	no

user_lastname	string	no

user_pob	string	no

user_photoid_number	string	no

user_id	string	no

user_created	integer	no

user_category	string	no

user_account_status	string	no

user_bank_account	string	no

user_bank_name	string	no

user_balance	float	no

user_verification_level	string	no

user_dob	date	no

user_country	string	no

user_city	string	no

user_region	string	no

user_zip	string	no

user_street	string	no

user_street2	string	no

session_id	string	no

session	string	no

device_id	string	no

payment_mode	string	no

payment_provider	string	no

card_fullname	string	no

card_bin	string	no

card_hash	string	no

card_expire	date	no

card_last	string	no

avs_result	string	no

cvv_result	boolean	no

status_3d	string	no

sca_method	string	no

phone_number	string	no

transaction_type	string	no

transaction_amount	float	no

transaction_currency	string	no

items	array of objects	no

shipping_country	string	no

shipping_city	string	no

shipping_region	string	no

shipping_zip	string	no

shipping_street	string	no

shipping_street2	string	no

shipping_phone	string	no

shipping_fullname	string	no

shipping_method	string	no

billing_country	string	no

billing_city	string	no

billing_region	string	no

billing_zip	string	no

billing_street	string	no

billing_street2	string	no

billing_phone	string	no

discount_code	string	no

gift	boolean	no

gift_message	boolean	no

merchant_category	string	no

merchant_id	string	no

merchant_created_at	integer	no

merchant_country	string	no

receiver_fullname	string	no

receiver_bank_account	string	no

details_url	string	no

regulation	string	no

bonus_campaign_id	string	no

brand_id	string	no

custom_fields	object	no

Warning: The maximum length of all request parameters is 100 characters, except the following: 200 characters for custom_fields, 500 characters for card_hash, 64 characters for the session_id (sent directly or within the session field), 19 characters for the phone_number, 15 characters for card_bin, 4 characters for transaction_currency, 50 characters for discount_code and shipping_method and 255 characters for transaction_id.

HTTP Endpoint

POST

https://api.seon.io/SeonRestService/fraud-api/v2/

Language

Industry

Use case

Response

The endpoint returns JSON structured response.

JSON Attributes	Type
id	string

state	string

fraud_score	number

blackbox_score	number

ip_details	object

email_details	object

bin_details	object

phone_details	object

aml_details	object

version	string

applied_rules	array of object

device_details	object

geolocation_details	object

calculation_time	integer

seon_id	integer

rule_category_details	array of object

Response

{
    "success": true,
    "error": {},
    "data": {
        "id": "67c2810c2de1",
        "state": "DECLINE",
        "fraud_score": 95.75,
        "blackbox_score": 93.25,
        "bin_details": {
            "card_bin": "414141",
            "bin_bank": "VERMONT NATIONAL BANK",
            "bin_card": "VISA",
            "bin_type": "CREDIT",
            "bin_level": "CLASSIC",
            "bin_country": "UNITED STATES",
            "bin_country_code": "US",
            "bin_website": "www.vermontnationalbank.com",
            "bin_phone": "+1 802 476 0030",
            "bin_valid": true,
            "card_issuer": "VISA"
        },
        "version": "v2",
        "applied_rules": [
            {
                "id": "1000702",
                "name": "Phone possible is equal to true",
                "operation": "+",
                "score": 1.11
            },
            {
                "id": "1000682",
                "name": "has_pep_match is not listed on watchlist2",
                "operation": "+",
                "score": 0.0
            },
            {
                "id": "P106",
                "name": "Customer is using a datacenter ISP",
                "operation": "+",
                "score": 10.0
            },
            {
                "id": "1000715",
                "name": "Temp ARC 2 category specific rule",
                "operation": null,
                "score": 0.0
            },
            {
                "id": "P110",
                "name": "IP address was found on 4 spam blacklists",
                "operation": "+",
                "score": 4.0
            },
            {
                "id": "1000671",
                "name": "has_sanction_match is equal to true",
                "operation": "+",
                "score": 0.0
            },
            {
                "id": "1000687",
                "name": "has_sanction_match is not listed on watchlist2",
                "operation": "+",
                "score": 0.0
            },
            {
                "id": "1000707",
                "name": "Rule C (User category is equal to VIP)",
                "operation": "+",
                "score": 0.0
            },
            {
                "id": "1000718",
                "name": "Domain creation date is greater than 1 month ago",
                "operation": "+",
                "score": 0.0
            },
            {
                "id": "1000670",
                "name": "has_watchlist_match is equal to false",
                "operation": "+",
                "score": 0.0
            },
            {
                "id": "1000696",
                "name": "Phone number valid is equal to true",
                "operation": "+",
                "score": 1.11
            },
            {
                "id": "P112",
                "name": "Customer is using public proxy",
                "operation": "+",
                "score": 10.0
            },
            {
                "id": "1000716",
                "name": "Temp ARC 2",
                "operation": "+",
                "score": 30.0
            },
            {
                "id": "1000713",
                "name": "Temp ARC category specific rule",
                "operation": null,
                "score": 0.0
            },
            {
                "id": "1000699",
                "name": "Phone country is equal to HU",
                "operation": "+",
                "score": 1.11
            },
            {
                "id": "E123",
                "name": "Email is not similar to user full name",
                "operation": "+",
                "score": 1.0
            },
            {
                "id": "1000674",
                "name": "Free email is equal to true",
                "operation": "+",
                "score": 1.11
            },
            {
                "id": "1000680",
                "name": "has_crimelist_match is not listed on watchlist2",
                "operation": "+",
                "score": 0.0
            },
            {
                "id": "PH100",
                "name": "At least 2 online profiles were found",
                "operation": "+",
                "score": 5.2
            },
            {
                "id": "1000666",
                "name": "has_crimelist_match is equal to false",
                "operation": "+",
                "score": 0.0
            },
            {
                "id": "1000706",
                "name": "Rule B (Affiliate full name is equal to Affiliate Two)",
                "operation": "+",
                "score": 0.0
            },
            {
                "id": "1000692",
                "name": "Sanction list match is equal to true",
                "operation": "+",
                "score": 0.0
            },
            {
                "id": "1000705",
                "name": "Rule A (Affiliate ID is equal to a002)",
                "operation": "+",
                "score": 0.0
            },
            {
                "id": "1000685",
                "name": "has_watchlist_match is not listed on watchlist2",
                "operation": "+",
                "score": 0.0
            },
            {
                "id": "1000698",
                "name": "Phone type is equal to Mobile",
                "operation": "+",
                "score": 1.11
            },
            {
                "id": "1000668",
                "name": "has_pep_match is equal to false",
                "operation": "+",
                "score": 0.0
            },
            {
                "id": "1000708",
                "name": "Rule D (User account status is equal to verified)",
                "operation": "+",
                "score": 0.0
            },
            {
                "id": "1000714",
                "name": "ARC User full name is equal to User full name",
                "operation": "+",
                "score": 30.0
            },
            {
                "id": "1000647",
                "name": "Count if Previous Email address similarity is equal to SIMILAR Email for the same Email domain is greater than 0",
                "operation": "+",
                "score": 0.0
            }
        ],
        "device_details": {
            "os": "MacOS",
            "type": "web",
            "dns_ip": null,
            "source": "js-5.8.0",
            "adblock": true,
            "browser": "FIREFOX10",
            "private": true,
            "platform": "MacIntel",
            "font_hash": "09894f345df34ce7ca5b86118ca1bec4",
            "font_list": [],
            "audio_hash": "35.73833039775491",
            "dns_ip_isp": null,
            "font_count": 13,
            "session_id": "90a87abb-91bc-5dc2-96f2-996acb894dd9",
            "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:102.0) Gecko/20100101 Firefox/102.0",
            "webgl_hash": null,
            "webrtc_ips": [ '70.111.37.513', '0.0.0.0'
            ],
            "canvas_hash": "b1f0e02120278dbf75e77cb92980648d",
            "cookie_hash": "b29b21a6ba46b2770bb1737fd6c06c7d",
            "device_hash": "73604e79a0321f57249e82e27273a7a0",
            "device_type": "desktop",
            "plugin_hash": "29b51cf1619fb6943f256c2c6da59432",
            "plugin_list": [
                "PDF Viewer",
                "Chrome PDF Viewer",
                "Chromium PDF Viewer",
                "Microsoft Edge PDF Viewer",
                "WebKit built-in PDF"
            ],
            "window_size": "1600x800",
            "browser_hash": "4c58b2c53ea7489232cddeb897efaf7a",
            "do_not_track": null,
            "java_enabled": false,
            "plugin_count": 5,
            "webgl_vendor": null,
            "webrtc_count": 2,
            "battery_level": 44,
            "device_ip_isp": null,
            "device_memory": null,
            "flash_enabled": false,
            "social_logins": [],
            "touch_support": false,
            "cookie_enabled": true,
            "dns_ip_country": "HU",
            "accept_language": [],
            "browser_version": "102.0",
            "device_location": {
                "zip": "1051",
                "city": "Budapest",
                "region": "HU-BU",
                "status": "SUCCESS",
                "accuracy": 5,
                "latitude": 47.4810949,
                "longitude": 18.9651553,
                "country_code": "HU"
            },
            "region_language": "en-US",
            "region_timezone": "+00:00",
            "battery_charging": null,
            "webrtc_activated": true,
            "device_ip_address": "15.130.507.00",
            "device_ip_country": "HU",
            "screen_resolution": "1600x800",
            "screen_color_depth": 24,
            "screen_pixel_ratio": 1,
            "hardware_concurrency": 2,
            "screen_available_resolution": "1600x800"
        },
        "calculation_time": 2327,
        "seon_id": 12602,
        "ip_details": {
            "ip": "1.2.3.4",
            "score": 24.0,
            "country": "AU",
            "state_prov": "Queensland",
            "city": "Brisbane",
            "timezone_offset": "+10:00",
            "isp_name": "APNIC Pty Ltd",
            "latitude": -27.48203,
            "longitude": 153.01358,
            "type": "DCH",
            "open_ports": [],
            "tor": false,
            "vpn": false,
            "web_proxy": false,
            "public_proxy": true,
            "spam_number": 4,
            "spam_urls": [
                "zen.spamhaus.org",
                "xbl.spamhaus.org",
                "noptr.spamrats.com",
                "dyna.spamrats.com"
            ]
        },
        "email_details": {
            "id": "9db22845-6a2d-4626-a453-231d63585379",
            "email": "johndoe@seon.io",
            "risk_scores": {
                "global_network_score": 11.26
            },
            "email_details": {
                "deliverable": true,
                "full_inbox": false,
                "valid_format": true,
                "minimum_age_months": 200,
                "earliest_profile_date": "2008-07-01 00:00:00"
            },
            "email_domain_details": {
                "accept_all": false,
                "created": "2015-03-20 12:42:37",
                "custom": true,
                "disposable": false,
                "dmarc_enforced": true,
                "domain": "seon.io",
                "expires": "2025-03-20 12:42:37",
                "free": false,
                "registered": true,
                "registered_to": "Seon Ltd.",
                "registrar_name": "NameCheap, Inc.",
                "spf_strict": true,
                "suspicious_tld": false,
                "tld": "io",
                "updated": "2024-02-24 08:11:02",
                "valid_mx": true,
                "website_exists": true
            },
            "account_aggregates": {
                "total_registration": 39,
                "business": {
                    "total_registration": 14,
                    "technology": {
                        "registered": 11,
                        "checked": 34
                    },
                    "science_and_education": {
                        "registered": 2,
                        "checked": 7
                    },
                    "jobs_and_employment": {
                        "registered": 1,
                        "checked": 4
                    },
                    "money_transfer_remittance": {
                        "registered": 0,
                        "checked": 2
                    }
                },
                "personal": {
                    "total_registration": 25,
                    "email_service": {
                        "registered": 2,
                        "checked": 6
                    },
                    "technology": {
                        "registered": 2,
                        "checked": 7
                    },
                    "adult_sites": {
                        "registered": 0,
                        "checked": 2
                    },
                    "delivery": {
                        "registered": 0,
                        "checked": 2
                    },
                    "ecommerce": {
                        "registered": 3,
                        "checked": 16
                    },
                    "entertainment": {
                        "registered": 7,
                        "checked": 28
                    },
                    "health_and_fitness": {
                        "registered": 2,
                        "checked": 4
                    },
                    "social_media": {
                        "registered": 8,
                        "checked": 21
                    },
                    "travel": {
                        "registered": 1,
                        "checked": 7
                    }
                }
            },
            "seon_fraud_history": {
                "fraudulent_decline_first_seen": 1625384237,
                "fraudulent_decline_last_seen": 1713949826,
                "fraudulent_decline_customer_hits": 2,
                "fraudulent_decline_hits": 2,
                "first_seen": 1584887689,
                "last_seen": 1713949826,
                "customer_hits": 4,
                "hits": 9,
                "flags": []
            },
            "breach_details": {
                "breaches": [
                    {
                        "date": "2018-07-23",
                        "domain": "apollo.io",
                        "name": "Apollo"
                    },
                    {
                        "date": "2019-05-24",
                        "domain": "canva.com",
                        "name": "Canva"
                    },
                    {
                        "date": "2020-09-28",
                        "domain": "gonitro.com",
                        "name": "Nitro"
                    },
                    {
                        "date": "2021-08-01",
                        "domain": "opensubtitles.org",
                        "name": "Open Subtitles"
                    },
                    {
                        "date": "2018-12-13",
                        "domain": "wanelo.com",
                        "name": "Wanelo"
                    }
                ],
                "first_breach": "2018-07-23",
                "haveibeenpwned_listed": true,
                "number_of_breaches": 5
            },
            "associated_domain_registrations": {
                "exists": true,
                "number_of_domains": 1,
                "domains": [
                    {
                        "domain_name": "thisisasampledomain.com",
                        "create_date": "2015-08-07 00:00:00",
                        "update_date": "2015-08-07 00:00:00",
                        "expiry_date": "2016-08-07 00:00:00",
                        "registrar_name": "GoDaddy.com, LLC",
                        "full_name": "John Doe",
                        "company_name": "JD Enterprises Ltd",
                        "mailing_address": "472, Doejohn Street",
                        "city_name": "JD City",
                        "state_name": "N/A",
                        "zip_code": "JD1234",
                        "country_code": "JD",
                        "phone_number": "1234556789"
                    }
                ],
                "first_registration_date": "2015-08-07 00:00:00"
            }
        },
        "phone_details": {
            "id": "9c02924f-9fa0-432c-9f0b-9a12873870b7",
            "phone": 36301234567,
            "risk_scores": {
                "global_network_score": 67.62
            },
            "account_aggregates": {
                "total_registration": 12,
                "business": {
                    "total_registration": 5,
                    "technology": {
                        "registered": 2,
                        "checked": 1
                    },
                    "science_and_education": {
                        "registered": 0,
                        "checked": 1
                    },
                    "jobs_and_employment": {
                        "registered": 1,
                        "checked": 0
                    },
                    "money_transfer_remittance": {
                        "registered": 2,
                        "checked": 4
                    }
                },
                "personal": {
                    "total_registration": 7,
                    "email_service": {
                        "registered": 1,
                        "checked": 1
                    },
                    "messenger": {
                        "registered": 1,
                        "checked": 3
                    },
                    "technology": {
                        "registered": 0,
                        "checked": 3
                    },
                    "delivery": {
                        "registered": 1,
                        "checked": 1
                    },
                    "ecommerce": {
                        "registered": 2,
                        "checked": 6
                    },
                    "entertainment": {
                        "registered": 0,
                        "checked": 3
                    },
                    "social_media": {
                        "registered": 1,
                        "checked": 9
                    },
                    "travel": {
                        "registered": 1,
                        "checked": 1
                    }
                }
            },
            "seon_fraud_history": {
                "fraudulent_decline_first_seen": 1625384237,
                "fraudulent_decline_last_seen": 1713949826,
                "fraudulent_decline_customer_hits": 2,
                "fraudulent_decline_hits": 2,
                "first_seen": 1584887689,
                "last_seen": 1713949826,
                "customer_hits": 4,
                "hits": 9,
                "flags": []
            },
            "provider_carrier_details": {
                "carrier": "Verizon Ltd",
                "country": "US",
                "disposable": false,
                "phone_is_valid": true,
                "type": "MOBILE"
            },
            "hlr_details": {
                "imsi": "316000000000000",
                "original_carrier": {
                    "carrier": "Verizon Wireless",
                    "carrier_prefix": "212333"
                },
                "ported_carrier": {
                    "carrier": "USA - Landline and Other Carriers",
                    "carrier_prefix": "252271"
                },
                "roaming_carrier": {
                    "carrier": null,
                    "carrier_prefix": null,
                    "carrier_country": null
                },
                "serving_msc": null,
                "status": "delivered"
            },
            "cnam_details": {
                "name": "John Doe"
            }
        },
        "geolocation_details": {
            "user_billing_distance": 15265.747,
            "user_shipping_distance": 15162.088,
            "billing_shipping_distance": 7677.429,
            "ip_user_distance": 10210.516,
            "ip_billing_distance": 12056.986,
            "ip_shipping_distance": 5019.496
        },
        "aml_details": null
    }
}

JavaScript Agent v6

You can integrate our device fingerprinting module directly into a web app, by using our JavaScript agent. Please, use our CDN hosted script to ensure you always load the latest available version. Check out our detailed information on SEON Web SDK GitHub page.

Tip: To migrate to JavaScript Agent v6 from v5 you need to implement a few integration changes which are detailed in our migration guide.

Include the JavaScript Agent for example inside the <head> tags of your website or web app. You can also lazy-load it or execute it upon specific actions (e.g. clicking on Login, Payment, and Registration buttons, before calling the API). In this case, you must ensure that the module has been loaded successfully before invoking its methods.
Call the seon.init() function on page load to get more data points for bot detection, behavioral analysis and more accurate intelligence signals.
Call the seon.getSession(config) function to generate the encrypted device intelligence session.
Send the returned session payload string to your backend and add to the session property in your Fraud API request. The Fraud API call should be still executed if the session is missing, due to a non-executed JS snippet. Tip: Add timeout to JS and utilize Fraud API call after.

All the device fingerprinting data will be available in the response of the Fraud API, and accessible on the Admin Panel of the Transactions Details page.

Note: Including the lightweight JavaScript agent or mobile SDKs is optional, but it provides in-depth analysis for each user’s device.

Configuration parameters

To configure the JavaScript module, you need to create a config object and call the seon.getSession(config) function

JSON Attributes	Required
geolocation	no

behavioralDataCollection	no

networkTimeoutMs	no

dnsResolverDomain	no

silentMode	no

referrer	no

windowLocation	no

region	no

fieldTimeoutMs	no

throwOn	no

Integration

Device Intelligence signals can be triggered by the seon.Session() function. After collecting all the available information, the function returns an encrypted base64 encoded payload. If you would like to use your custom configuration, please include the config object in the function.

Without using the seon.init() on page load you will still receive valid device intelligence signals with most of the functions but it will not contain the behavioral signals. Additionally, the bot detection and browser hash may be less precise.

Behavioral features

Calling the seon.init() method will enable behavioral analysis. The user behavior collection is started on the seon.init() call and ends when seon.getSession() is called (behavioral data will be automatically included in the generated session string). Thus the recommended integration pattern is calling init on the form load, and calling getSession on form submit to analyze user behavior during a form fillout. Suspicious behavior is flagged in the suspicious_flags response field, which can contain the following values:

suspicious_keypress_characteristics
suspicious_mouse_movement
suspicious_form_fillout
paste_used
autofill_used
potential_remote_interaction
potential_remote_control

By default, user interaction is analyzed on the whole page. If you want to target specific input fields or forms for behavior analysis, you can customize it using the behavioralDataCollection init configuration option:

The targeted elements MUST exist at the time of the init call. Elements that match the selector, but added to the DOM after the init call will NOT be part of the evaluation.

To disable behavioral data collection by the SDK altogether, you must specify an empty string for the targets option:

Payload

SEON JavaScript library collects device information and prepares an encrypted payload to use in Fraud API. The information on client side is not readable, we’ll reveal in the Fraud API response and on the Admin Panel. Some fields can be null, if the actual browser does not support or return data for that specific data point. In every other case, data types are preserved. Find a sample payload on the right side.

Common issues

The session is provided in the Fraud API request, but the device_details is null in the response and there is no device information on the Transaction details page. This means the encrypted payload is corrupted. Please look into your integration and check again.
If you use CSP (Content Security Policy) headers on your site, you must allow the following domains in connect-src directive for full functionality based on your host configuration.

Default: *.seondnsresolve.com
seondf.com: *.seondfresolver.com
deviceinf.com: *.deviceinfresolver.com
seonintelligence.com: *.seonintelligence.com

Alternatively you integrate the SDK through NPM. With this method you will have to keep the package updated yourself to include our latest features and bugfixes.

NPM integration

npm install @seontechnologies/seon-javascript-sdk
# or
yarn add @seontechnologies/seon-javascript-sdk

Response

JSON Attributes	Type
os	string

vpn	boolean

type	string

proxy	boolean

webgl	object

dns_ip	string

locale	string

source	string

adblock	boolean

battery	object

browser	string

plugins	object

private	boolean

platform	string

referrer	string

timezone	string

device_ip	string

font_hash	string

font_list	array

has_focus	boolean

languages	array

math_hash	string

audio_hash	string

dns_ip_isp	string

extensions	array

font_count	integer

font_noise	boolean

session_id	string

user_agent	string

webrtc_ips	array

canvas_hash	string

cookie_hash	string

device_hash	string

device_type	string

mouse_moved	boolean

permissions	object

price_range	string

screen_data	object

browser_hash	string

do_not_track	boolean

java_enabled	boolean

webrtc_count	integer

device_ip_isp	string

device_memory	integer

dns_ip_region	string

flash_enabled	boolean

media_devices	object

spoofing_hash	string

touch_support	boolean

cookie_enabled	boolean

dns_ip_country	string

mobile_details	array

browser_version	string

device_location	object

drm_key_systems	array

mime_types_hash	string

timezone_offset	string

user_agent_data	object

window_location	string

device_ip_region	string

max_touch_points	integer

suspicious_flags	array

timezone_country	string

webrtc_activated	boolean

device_ip_country	string

system_colors_hash	string

browser_version_age	integer

hardware_concurrency	integer

keyboard_layout_hash	string

keyboard_layout_name	string

unpopular_user_agent	boolean

unpopular_device_resolution	boolean

true_device_id	string

<html>
  <head>
    ...
    <script src="[source_url]"></script>
  </head>
  <body>
    ...
  </body>
</html>

You can use the following script source URLs ([source_url]):

// On page load:
seon.init();

const config = {
  geolocation: {
   canPrompt: false,
  },
  networkTimeoutMs: 2000,
  fieldTimeoutMs: 2000,
  region: 'eu',
  silentMode: true,
};

const session = await seon.getSession(config);
// 'session' variable holds the encrypted device fingerprint that should be sent to SEON

// On load
seon.init({
  behavioralDataCollection: {
    targets: 'input[type="text"], .behavior', // querySelector string
    formFilloutDurationTargetId: "myForm", // select form with id 'myForm'
  }
});
// On form submit
await seon.getSession();

// Disabling behavioral analysis
seon.init({
  behavioralDataCollection: {
    targets: '', // pass an emtpy string for targets
  }
});

Response

"device_details": {
  "device_location": {
      "accuracy": 20,
      "latitude": 47.4379457,
      "longitude": 19.1125038,
      "status": "SUCCESS",
      "zip": "1204",
      "city": "Budapest",
      "region": "HU-BU",
      "country_code": "HU"
  },
  "adblock": false,
  "audio_hash": "124.04346607114712",
  "battery": {
      "battery_charging": true,
      "battery_level": 100
  },
  "browser_hash": "9fc8c3bdc369cdb1bd5c29542eedc092",
  "browser_version_age": 0,
  "browser_version": "134.0.0.0",
  "browser": "CHROME",
  "canvas_hash": "cf06210f828cb8744cb449a843b83305",
  "cookie_enabled": true,
  "cookie_hash": "9831c012f5d3056e2399968b55296f91",
  "device_hash": "c92d19d5c29dbd2834e2281d28b35fd5",
  "device_ip": "188.0.0.0",
  "device_ip_country": "HU",
  "device_ip_isp": "Magyar Telekom",
  "device_ip_region": null,
  "device_memory": 8,
  "device_type": "desktop",
  "do_not_track": null,
  "dns_ip": "141.101.104.187",
  "dns_ip_country": "AT",
  "dns_ip_isp": "CloudFlare Inc",
  "dns_ip_region": null,
  "drm_key_systems": [
      "org.w3.clearkey"
  ],
  "extensions": [],
  "flash_enabled": false,
  "font_count": 17,
  "font_hash": "4160d90df34f64c3683c5b1e54bd7d57",
  "font_list": [
      "monospace",
      "sans-serif",
      "serif",
      "Apple Chancery",
      "Apple Color Emoji",
      "Arial Hebrew",
      "Arial Rounded MT Bold",
      "Arial Unicode MS",
      "Baskerville",
      "Geneva",
      "Gill Sans",
      "Helvetica Neue",
      "Menlo",
      "Monaco",
      "Noto Sans Yi",
      "Palatino",
      "Tahoma"
  ],
  "font_noise": false,
  "hardware_concurrency": 8,
  "has_focus": true,
  "java_enabled": false,
  "keyboard_layout_hash": "eac72b515383ac8b4bbbb232ff6841f1",
  "keyboard_layout_name": "Hungarian",
  "languages": [
      "en-GB",
      "en-US",
      "en"
  ],
  "locale": "en-GB",
  "math_hash": "a931b6543effb809b4abb1ecb36431db",
  "max_touch_points": 0,
  "media_devices": {
      "audio_input_count": 1,
      "audio_output_count": 1,
      "video_input_count": 1
  },
  "mime_types_hash": "12ce62938a9f2e8b926a65dfc687824d",
  "mobile_details": {
      "announced": null,
      "models": [],
      "resolution": null,
      "avg_price_in_eur": null,
      "battery_size_in_mah": null,
      "device_name": null
  },
  "mouse_moved": false,
  "os": "macOS 10.15 Catalina",
  "permissions": {
      "denied": [],
      "granted": [
        "accelerometer",
        "background-fetch",
        "background-sync",
        "geolocation",
        "gyroscope",
        "magnetometer",
        "screen-wake-lock"
      ],
      "prompt": [
        "camera",
        "display-capture",
        "microphone",
        "midi",
        "notifications",
        "persistent-storage"
      ]
  },
  "platform": "MacIntel",
  "plugins": {
      "plugin_count": 5,
      "plugin_hash": "a61464d4341e30d7773ad797e19ea630",
      "plugin_list": [
        "PDF Viewer",
        "Chrome PDF Viewer",
        "Chromium PDF Viewer",
        "Microsoft Edge PDF Viewer",
        "WebKit built-in PDF"
      ]
  },
  "price_range": "medium",
  "proxy": false,
  "referrer": "",
  "screen_data": {
      "device_pixel_ratio": 2.0,
      "document_height": 78,
      "document_width": 1496,
      "is_extended": false,
      "orientation_angle": 0,
      "orientation_type": "landscape-primary",
      "screen_available_height": 869,
      "screen_available_width": 1512,
      "screen_color_depth": 30,
      "screen_height": 982,
      "screen_pixel_depth": 30,
      "screen_width": 1512,
      "window_inner_height": 782,
      "window_inner_width": 1512,
      "window_outer_height": 869,
      "window_outer_width": 1512,
      "window_screen_x": 0,
      "window_screen_y": 38,
      "window_scroll_x": 0,
      "window_scroll_y": 0
  },
  "session_id": "14e671a5f503b0d0d8d978a67de0866b",
  "source": "js-6.5.1",
  "spoofing_hash": "fbdcfe51a27dadafac9ccf8a2e34b9bd",
  "suspicious_flags": [],
  "system_colors_hash": "2a20eb8a0076d38e67fafce18f2c5377",
  "timezone_country": "HU",
  "timezone_offset": "+01:00",
  "timezone": "Europe/Budapest",
  "touch_support": false,
  "type": "web",
  "unpopular_device_resolution": false,
  "unpopular_user_agent": false,
  "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36",
  "user_agent_data": {
      "architecture": "arm",
      "bitness": "64",
      "mobile": false,
      "model": "",
      "platform_version": "15.3.1",
      "platform": "macOS",
      "ua_full_version": "134.0.6998.89"
  },
  "vpn": false,
  "webgl": {
      "webgl2_image_hash": "9e0924fc01f9d18c4f8ea400b2de8bec",
      "webgl2_parameters_hash": "fab638debfcefc10764ac68cd00e18e4",
      "webgl2_parameters_noise": false,
      "webgl_hash": "41f3cabaf3febc32cc1bb223db03867d",
      "webgl_image_hash": "9e0924fc01f9d18c4f8ea400b2de8bec",
      "webgl_parameters_hash": "97ec8905c1226b744a9edbffbc5f4a34",
      "webgl_parameters_noise": false,
      "webgl_renderer": "ANGLE (Apple, ANGLE Metal Renderer: Apple M1 Pro, Unspecified Version)",
      "webgl_vendor": "Google Inc. (Apple)"
  },
  "webrtc_activated": true,
  "webrtc_count": 1,
  "webrtc_ips": [
      "188.0.0.0"
  ],
  "window_location": "https://randomsite.random",
  "true_device_id": "0195943f-b231-7c7c-9586-b3b0cccb039a",
  "private": false
}

iOS SDK

You can integrate our device fingerprinting module directly into iOS mobile apps, by using our SDK found on GitHub. It will collect information based on the user’s software and hardware configuration.

Note: Starting from v5 there is a change in SEON’s API Policy. From now on SEON might introduce new fields in the SDK with minor versions. We advise you to integrate in a way that addition of new fields is handled gracefully.

The SDK returns an encrypted, base64 encoded string to add in the session property in the Fraud API request. It isn’t permitted to access or modify the payload on the clients.
JSON structured device details will be returned in the Fraud API response.
Latest version available: 5.5.2 Details on previous versions here.

Behaviour Monitoring (Optional)

behaviour Monitoring allows the SEON SDK to be able to detect potentially suspicious user behaviour on the device. The SDK collects data during the session, which is then analyzed to identify potentially fraudulent environments and actions. This feature enhances the SDK’s ability to prevent fraud by detecting various forms of automated or suspicious activity, such as bot usage or device farms.

Note: For the result of the behaviour evaluation, we are introducing a new response field in the Fraud API response named suspicious_flags. It's available in sessions generated by iOS SDK version 5.4.0 or later when the session had been generated by the new startBehaviourMonitoring and stopBehaviourMonitoring interfaces.

The monitoring should be started with calling startBehaviourMonitoring wherever you would like to detect suspicious activity in your application and should be stopped with stopBehaviourMonitoring whenever it's reasonable. The returned session string should be then used in a Fraud API request as usual.

Possible `suspicious_flags` values:

"possible_automation": Suggests that automation tools or scripts may be controlling the device.
"possible_device_farm": Suggests that the device might be part of a device farm used for fraudulent activities.
"possible_vishing": Flags possible vishing (voice phishing) activity, where the user might be coerced into providing sensitive information.

To be continuously improved and extended with new signals

Response

JSON Attributes	Type
type	string

source	string

session_id	string

accessories_count	integer

audio_mute_status	boolean

audio_volume_current	integer

battery_charging	boolean

battery_level	integer

can_send_mail	boolean

can_send_text	boolean

cpu_count	integer

cpu_type	string

device_adid	string

device_hash	string

device_name	string

device_orientation	string

device_udid	string

icloud_ubiquity_token	string

ios_device_name	string

ios_version	string

is_biometrics_enabled	boolean

is_emulator	boolean

is_ios_app_on_mac	boolean

is_jailbroken	boolean

is_on_call	boolean

is_passcode_enabled	boolean

is_screen_captured	boolean

kernel_arch	string

kernel_name	string

kernel_version	string

network_config	string

pasteboard_hash	string

physical_memory	unsigned long

region_country	string

region_language	string

region_timezone	string

screen_brightness	integer

screen_height	integer

screen_width	integer

system_uptime	integer

timezone_identifier	string

wifi_mac_address	string

wifi_ssid	string

proxy_address	string

proxy_state	string

vpn_state	string

dns_ip	string

dns_ip_country	string

dns_ip_isp	string

device_ip_address	string

device_ip_country	string

device_ip_isp	string

device_location	object

suspicious_flags	array

true_device_id	string

Response

"device_details": {
  "accessories_count": 0,
  "audio_mute_status": false,
  "audio_volume_current": 100,
  "battery_charging": false,
  "battery_level": 100,
  "can_send_mail": false,
  "can_send_text": true,
  "cpu_count": 6,
  "cpu_type": "ARM_64E",
  "device_adid": "00000000-0000-0000-0000-000000000000",
  "device_hash": "093c1d6097b2cecef5f97dbb8cdbb1d4a51be619acec724762db475ca0e329bf",
  "device_ip_address": "204.14.77.139",
  "device_ip_country": "DE",
  "device_ip_isp": "Areti Internet LLC",
  "device_ip_region": null,
  "device_name": "iPhone 13",
  "device_orientation": "Portrait",
  "device_udid": "EA832CEA-EFEF-46C9-83DD-30A7A92BCF20",
  "dns_ip": null,
  "dns_ip_country": null,
  "dns_ip_isp": null,
  "icloud_ubiquity_token": null,
  "ios_device_name": "iPhone",
  "ios_version": "16.3",
  "is_biometrics_enabled": false,
  "is_emulator": false,
  "is_ios_app_on_mac": false,
  "is_jailbroken": false,
  "is_on_call": false,
  "is_passcode_enabled": false,
  "is_screen_captured": true,
  "kernel_arch": "arm64",
  "kernel_name": "Darwin",
  "kernel_version": "20D47",
  "network_config": "WIFI",
  "pasteboard_hash": "f46df9a8f5e1c4c1f0e17649a4214e19503569f77991533f1db1747b28523fe5",
  "physical_memory": 3824435200,
  "region_country": "DE",
  "region_language": "en",
  "region_timezone": "",
  "screen_brightness": 5,
  "screen_height": 2532,
  "screen_width": 1170,
  "session_id": "basic_session_id",
  "source": "ios-5.5.2",
  "system_uptime": 23305,
  "timezone_identifier": "GMT",
  "type": "ios",
  "wifi_mac_address": null,
  "wifi_ssid": null,
  "proxy_address": "204.14.77.139:45691",
  "proxy_state": "CONNECTED",
  "vpn_state": "UNKNOWN",
  "suspicious_flags": [],
  "true_device_id": "0194cc25-d791-760e-8ad3-7b3bf9162fde"
}

Android SDK

You can integrate our device fingerprinting module directly into Android mobile apps, by using our SDK found on GitHub. In the repo you will also find more details about the integration like requirements and samples. It will collect information based on the user’s software and hardware configuration.

Note: Starting from v6 there is a change in SEON’s API Policy. From now on SEON might introduce new fields in the SDK with minor versions. We advise you to integrate in a way that addition of new fields is handled gracefully.

The SDK returns an encrypted, base64 encoded string to add in the session property in the Fraud API request. It isn’t permitted to access or modify the payload on the clients.
JSON structured device details will be revealed in the Fraud API response.
Latest version available: 6.6.1 Details on previous versions here.

Behaviour Monitoring (Optional)

Behaviour Monitoring allows the SEON SDK to be able to detect potentially suspicious user behaviour on the device. The SDK collects data during the session, which is then analyzed to identify potentially fraudulent environments and actions. This feature enhances the SDK’s ability to prevent fraud by detecting various forms of automated or suspicious activity, such as bot usage or device farms.

Note: For the result of the behaviour evaluation, we are introducing a new response field in the Fraud API response named suspicious_flags. It's available in sessions generated by Android SDK version 6.5.0 or later when the session had been generated by the new startBehaviourMonitoring and stopBehaviourMonitoring interfaces.

The monitoring must be started with calling startBehaviourMonitoring wherever you would like to detect suspicious activity in your application and should be stopped with stopBehaviourMonitoring whenever it's reasonable. The returned session string should be then used in a Fraud API request as usual. Note: If you call stopBehaviourMonitoring without startBehaviourMonitoring called previously, the method will exit with BehaviouralMonitoringException thrown.

Possible `suspicious_flags` values:

"possible_automation": Suggests that automation tools or scripts may be controlling the device.
"possible_device_farm": Suggests that the device might be part of a device farm used for fraudulent activities.
"possible_vishing": Flags possible vishing (voice phishing) activity, where the user might be coerced into providing sensitive information.
"possible_ongoing_call": Flags possible ongoing phone call, which could be useful information in case the READ_PHONE_STATE permission wasn't granted for is_on_call field to work. This behaviour based flag does not need any permissions to work, but it's only a best-effort metric.
To be continously improved and extended with new signals

Response

JSON Attributes	Type
type	string

source	string

session_id	string

android_id	string

android_version	string

app_guid	string

audio_mute_status	boolean

audio_volume_current	integer

battery_charging	boolean

battery_health	string

battery_level	integer

battery_temperature	float

battery_voltage	integer

biometric_status	string

bootloader_state	string

build_device	string

build_id	string

build_manufacturer	string

build_model	string

build_number	string

build_time	integer

carrier_country	string

carrier_name	string

cpu_count	integer

cpu_hash	string

cpu_speed	double

cpu_type	string

developer_options_state	string

device_hash	string

device_cellular_id	string

device_name	string

device_orientation	string

free_storage	integer

gsf_id	string

has_proximity_sensor	boolean

interfering_apps	array of string

is_click_automator_installed	boolean

is_emulator	boolean

is_keyguard_secure	boolean

is_nfc_available	boolean

is_nfc_enabled	boolean

is_on_call	boolean

is_remote_control_connected	boolean

is_rooted	boolean

is_screen_being_mirrored	boolean

kernel_arch	string

kernel_name	string

kernel_version	string

last_boot_time	integer

network_config	string

pasteboard_hash	string

physical_memory	integer

region_country	string

region_language	string

region_timezone	string

remote_control_provider	string

screen_brightness	integer

screen_height	integer

screen_scale	integer

screen_width	integer

sensor_hash	string

system_uptime	integer

timezone_identifier	string

total_storage	integer

usb_cable_state	string

usb_debugging_state	string

wifi_mac_address	string

wifi_ssid	string

dns_ip	string

dns_ip_country	string

dns_ip_isp	string

device_ip_address	string

device_ip_country	string

device_ip_isp	string

device_location	object

vpn_state	string

proxy_state	string

proxy_address	string

first_api_level	int

power_source	string

suspicious_flags	array

is_app_cloned	boolean

system_integrity	string

true_device_id	string

Response

"device_details": {
  "android_id": "474de2ab2b98b43d",
  "android_version": "33 (13)",
  "app_guid": "07e9f6d2-962d-428e-87c4-38598f885428",
  "audio_mute_status": false,
  "audio_volume_current": 33,
  "battery_charging": true,
  "battery_health": "UNKNOWN",
  "battery_level": 100,
  "battery_temperature": 0.0,
  "battery_voltage": 0,
  "biometric_status": "NOT_ENROLLED",
  "bootloader_state": "BOOTLOADER_STATE_LOCKED",
  "build_device": "motion_phone_arm64",
  "build_id": "TQ2B.230505.005.A1",
  "build_manufacturer": "Genymobile",
  "build_model": "Nexus 10",
  "build_number": "TQ2B.230505.005.A1",
  "build_time": 1728636993,
  "carrier_country": "US",
  "carrier_name": "Android",
  "cpu_count": 4,
  "cpu_hash": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
  "cpu_speed": -1.0,
  "cpu_type": "arm64-v8a",
  "developer_options_state": "DEV_OPTIONS_DISABLED",
  "device_cellular_id": null,
  "device_hash": "177ac0fb53587176bf19f91c6afbc8671410abf98380a3bf8e4f98060b28e36c",
  "device_ip_address": "80.99.168.164",
  "device_ip_country": "HU",
  "device_ip_isp": "One Hungary Ltd.",
  "device_ip_region": null,
  "device_name": "Genymobile motion_phone_arm64",
  "device_orientation": "Landscape Left",
  "dns_ip_country": null,
  "dns_ip_isp": null,
  "dns_ip": null,
  "free_storage": 13033058304,
  "gsf_id": null,
  "has_proximity_sensor": true,
  "interfering_apps": [],
  "is_click_automator_installed": false,
  "is_emulator": true,
  "is_keyguard_secure": false,
  "is_nfc_available": false,
  "is_nfc_enabled": false,
  "is_on_call": false,
  "is_remote_control_connected": false,
  "is_rooted": false,
  "is_screen_being_mirrored": false,
  "kernel_arch": "aarch64",
  "kernel_name": "Linux",
  "kernel_version": "5.15.94-genymotion-android13-8-00028-gac4940659881-ab110",
  "last_boot_time": 1741610026,
  "network_config": "WIFI",
  "pasteboard_hash": "b98e85f214057e5c1414f4adaf4f8d188c7dfdccc74f7c9fc26852133d7ba14b",
  "physical_memory": 2020548000,
  "region_country": "US",
  "region_language": "en",
  "region_timezone": "+00:00",
  "remote_control_provider": null,
  "screen_brightness": 82,
  "screen_height": 1600,
  "screen_scale": 2,
  "screen_width": 2560,
  "sensor_hash": "22edcbcd35528b5c6706149d37fcd345c207de1383a21781fc1ae13593f78766",
  "session_id": "1ffdce39-8189-4d56-801f-2dfe99aecf24",
  "source": "android-6.6.1",
  "system_uptime": 63,
  "timezone_identifier": "GMT",
  "total_storage": 13228740608,
  "type": "android",
  "usb_cable_state": "UNKNOWN",
  "usb_debugging_state": "USB_DEBUGGING_ENABLED",
  "wifi_mac_address": null,
  "wifi_ssid": "AndroidWifi",
  "first_api_level": 16,
  "power_source": "AC",
  "proxy_address": null,
  "proxy_state": "NOT_CONNECTED",
  "vpn_state": "NOT_CONNECTED",
  "suspicious_flags": [],
  "true_device_id": "019594aa-e9b3-7960-9ef3-cce3cde72589",
  "system_integrity": "COMPROMISED",
  "is_app_cloned": false,
  "device_location": {
      "accuracy": 0,
      "is_simulated": false,
      "latitude": 65.8411099471,
      "longitude": -18.6871085937,
      "status": "SUCCESS",
      "zip": null,
      "city": null,
      "region": "IS-6",
      "country_code": "IS"
  }
}

Fraud API

Good to know

Request

Request Attributes

config

action_type

ip

transaction_id

affiliate_id

affiliate_name

order_memo

email

email_domain

payment_id

password_hash

user_fullname

user_name

user_firstname

user_middlename

user_lastname

user_pob

user_photoid_number

user_id

user_created

user_category

user_account_status

user_bank_account

user_bank_name

user_balance

user_verification_level

user_dob

user_country

user_city

user_region

user_zip

user_street

user_street2

session_id

session

device_id

payment_mode

payment_provider

card_fullname

card_bin

card_hash

card_expire

card_last

avs_result

cvv_result

status_3d

sca_method

phone_number

transaction_type

transaction_amount

transaction_currency

items

shipping_country

shipping_city

shipping_region

shipping_zip

shipping_street

shipping_street2

shipping_phone

shipping_fullname

shipping_method

billing_country

billing_city

billing_region

billing_zip

billing_street

billing_street2

billing_phone

discount_code

gift

gift_message

merchant_category

merchant_id

merchant_created_at

merchant_country

receiver_fullname