Data Enrichment
What is Digital Footprint Analysis?
SEON relies on data enrichment APIs to enhance the data you have connected to each transaction. You can learn more about how and why you should consider using such a service for your business here.
These modules scan open-source databases and different online platforms and gather publicly available information about users in real-time based on an Email address, Phone number or IP address. You can also simply check if an email address or phone number is valid or not and instantly get background information to create a complete user profile, flag fraudsters, confirm suspicions or remove doubts.
SEON uses alternative data for online presence in combination with traditional signals and network data to provide a comprehensive picture of the risk level associated with the target email address, phone number or IP address.
Module Overview
Data enrichment is handled by four APIs/modules.
- Email API
The Email API generates a comprehensive, machine-learning-powered network risk score associated with a single email address based on deep social media profiling, our global consortium intelligence, approximate email age, insights from data breaches, domain and email verification tools as well as historic transactional data. Fake email addresses can quickly be filtered out with the help of the Email API. - Phone API
Our Phone API combines numerous data sources to provide an in-depth phone number investigation tool. It aggregates open and reachable online presence data, carrier and country information, disposable number detection and historic transactional data to flag fraudsters based on a phone number only and provide a comprehensive, machine-learning-powered network risk score. - IP API
The IP API generates a risk score associated with a single IP address. The elements that are being analyzed depict a clear picture of whether the user is trying to mask their connection: whether a VPN/Proxy was in use, IP geolocation, ISP information and harmful and TOR IP detection.
To understand how they work on the API level, please refer to our API references.
Email Module
Our standalone Email Module is designed to provide you with invaluable insights into the digital footprint associated with an email address, such as the approximate minimum age, its provider, whether it is disposable, and number of online profiles found when checking on more than 160 digital platforms. It also returns all breaches associated with the email address and SEON's consortium fraud history built on our global intelligence for millions of onboarding events.
Network Risk Score
To make decisioning easier, we incorporated all email data points into a proprietary email network risk score, which can be used as a new indicator of confidence when assessing a user's digital profile. The network risk score leverages machine learning alongside consortium data from over 5,000 customers. Network risk scores are derived from an anonymized model trained on millions of onboarding events with over six years of historical data, as well as real-time data signals, ensuring precise and accurate risk assessments.
Email network risk score predicts the likelihood of fraud associated with the email address. Any email address with a network risk score above 80 is risky and should be reviewed.
Digital & Social Media Lookup
Aggregate digital profiles and social media profiles linked to the email address to confirm identities and flag suspicious users. Aggregated categories group together signals from similar platforms. Using these categories to assess risk instead of specific signals eliminates the need to fine-tune individual signals and continuously update rules to add new signals. Email signals are organized into 2 top-level and 13 sub-categories:
Personal accounts:
|
|
|
|
|
|
|
|
|
Business accounts:
|
|
|
|
Fraudulent Network Transaction History
The global consortium-based threat intelligence pools data from diverse sectors and geographies for comprehensive threat detection. Fraudulent network transaction history is built on SEON’s global intelligence for millions of onboarding events, providing you insights by utilizing SEON's powerful network effect, such as:
- How many companies have reported the email address as fraudulent
- How many fraudulent transactions are associated with the email address
- When was the first time and last time the email address was seen in a fraudulent transaction
Detailed Email Validity & Domain Check to Detect
- Email deliverability & validity
- Disposable, high-risk providers
- Catch-All (Accept-All) email providers
- No SMS verification enabled providers
- Free email providers
- Domain creation, update, and expiration date
- Domain exists or not
- Suspicious top-level domain checks
- Domain-based Message Authentication Reporting and Conformance enforced or not
- Custom domain or not
- MX records are valid or not
- SPF is sufficiently strict enough to prevent spoofing or not
- Domain registrar information
Full User Profiling Check the email address creation date, user real name, domain whois database and confirm the address exists - without any blackbox algorithms. Provides age checking using data breach information.
|
Accurate Risk Scoring One-step identity validation to sort out all the steps of user profiling under 1 sec. Risk scores are generated with completely accurate data, and let you block fraudulent users with adjustable thresholds. Provides deep user email address analysis and generates scores on a 0-100 scale. |
Email Validation Using a fast SMTP-MX check, Email API returns whether an email address is valid or not and information on the email's domain, such as if it's free/disposable. In the case of custom domains, it checks whether or not there is a registered website, the creation date, and if the top-level domain is suspicious or not. |
Minimum Age & Associated Domains We also calculate the approximate minimum age of the email address in months calculated as the difference between the date of the transaction and the first online presence date. A reverse WhoIs lookup is also run to return all the domains registered with the target email address which is a strong indication that the email address is legit. |
Detailed Investigation SEON aggregates data from open sources and databases to get a complete picture of your users and ensure accurate fraud prediction.
|
Privacy and Compliance Requested data is anonymized and connections are secured via SSL. SEON doesn’t store logs or sensitive data, ensuring full data protection compliance. |
Learn more about the fraud perspective(s) in the User Manual.
Phone Module
Our Phone API aggregates numerous data sources to provide an in-depth phone number investigation tool. It searches open and reachable data including the digital footprint of the phone number, phone type, whether it is disposable, carrier details and SEON's consortium network history to flag fraudsters based on a single phone number.
Network Risk Score
We also introduced a machine-learning-powered phone network risk score which can be used as a new indicator of confidence when assessing a digital profile associated with a phone number. Network risk scores are derived from an anonymized model trained on millions of onboarding events with over six years of historical data, as well as real-time data signals, ensuring precise and accurate risk assessments.
Phone network risk score predicts the likelihood of fraud associated with the phone address. Any phone number with a network risk score above 80 is risky and should be reviewed.
Digital & Social Media Lookup
Aggregate digital profiles and social media profiles linked to the phone number to confirm identities and flag suspicious users. Aggregated categories group together signals from similar platforms. Using these categories to assess risk instead of specific signals eliminates the need to fine-tune individual signals and continuously update rules to add new signals. Phone signals are organized into 2 top-level and 12 sub-categories:
Personal accounts:
|
|
|
|
|
|
|
|
Business accounts:
|
|
|
|
Fraudulent Network Transaction History
The global consortium-based threat intelligence pools data from diverse sectors and geographies for comprehensive threat detection. Fraudulent network transaction history is built on SEON’s global intelligence for millions of onboarding events, providing you insights by utilizing SEON's powerful network effect, such as:
- How many companies have reported the phone number as fraudulent
- How many fraudulent transactions are associated with the phone number
- When was the first time and last time the phone number was seen in a fraudulent transaction
Validity Check Filter out invalid phone numbers by examining strings at a glance. |
Country, Carrier, and Type Detect the origin country, type, and carrier to calculate risk scores. |
Social Media Lookup Connect the phone number to associated social media accounts to see if it matches your user profile. |
HLR/CNAM Lookup Detect if the phone number is virtual or cloud-registered by checking the HLR + IMSI. Retrieve the subscriber name via CNAM. |
Please read our Phone API reference for integration options and list of signals we return for a single phone number.
IP Module
Identify suspicious VPN and proxy connections and pinpoint users with accurate geolocation information.
Proxy / VPN / Tor Detect connection methods and mitigate risks associated with certain proxies, virtual private networks, or TOR browser users. |
Spam Blacklist Block blacklisted spammers from signing up or logging onto your platform by checking on more than 60 DNSBL real time. |
Datacenter ISP Identifier Unmask users trying to connect to your service via suspicious data centers and mark them for future fraud prevention. |
ISP and Location Confirm user location and risk based on their Internet Service Provider risk category.
|
Open Port Ping Ping IP addresses open ports to get accurate results on proxy usage. Detect malicious bots, including brute-force attackers and hijacked netblocks. |
Accurate Results Generate accurate, in-depth reports and scoring in less than 200ms to block suspicious users, flag fraudsters, and improve your business operations. |
Learn more about the fraud perspective(s) in the Knowledge Base.
Or read our resources to understand how IP analysis is helpful in fighting fraud here.
Automate Risk Assessment with SEON's Scoring Engine
SEON’s Scoring Engine automates fraud detection by generating risk scores based on user profiling, traditional static database results, and network insights. It simplifies decision-making and provides real-time risk assessments for every user interaction. By using the Fraud API in conjunction with the digital footprint APIs, all signals are fed through rules, which calculate the risk for specific user actions (login, onboarding, registration, etc...) or transactions. It applies customizable rules to generate a risk score that reflects the likelihood of fraudulent behavior. Higher risk scores trigger automated actions such as additional verification or transaction blocking.
Key Benefits:
- Customizable fraud rules: Tailor risk thresholds and fraud detection settings.
- Real-time decisions: Automatically approve, deny, or flag actions based on risk scores.
- Dynamic risk scoring: Scores adjust as new data is collected, ensuring accuracy.
Get started with SEON's Digital Footprint Modules
Start protecting your platform with SEON’s Device Intelligence and Scoring Engine today. Gain real-time insights, automate fraud detection, and safeguard your business from evolving threats.