Risk signals
Updated on 12.09.25
1 minute to read
Copy link
Overview
Risk signals are color-coded tags in SEON that highlight fraud risk at a glance. Each one is powered by rules from SEON’s fraud library, ensuring consistent and reliable signals.
- Red: High-risk
- Yellow: Medium-risk
- Green: Low-risk or positive signal

How risk signals help
- Immediate clarity: Flags risk without needing to dig into raw widget data.
- Visual prioritization: Makes risky behavior stand out at a glance.
- No extra configuration: Built into the SEON UI and live with every alert transaction.
- Trusted insights: Based on SEON’s fraud prevention experience across global industries.
How they work
- Tags appear inside each widget (Email, Phone, IP, Device & OS, List Status) automatically when a transaction or alert loads. You can also find Risk Signals summarized in the AI Summary, where the most relevant tags are grouped and highlighted in the summary section.
- Each tag fires only if its associated rule evaluates true, meaning you won’t see clutter from irrelevant labels.
- Tags are advisory only. They do not impact scoring or block decisions unless incorporated into your own custom rules.
- Tooltips provide a short explanation of each signal.
Example signals
Disposable domain: Address comes from a well-known throw-away provider.
Phone
Disposable number: Number belongs to a temporary or virtual carrier.
IP
TOR exit node: Connection is routed through the TOR network.
Device
High-risk device: Fingerprint matches patterns linked to fraud-heavy behaviour.
Our library of risk signals is always expanding. New tags will appear automatically once they meet quality standards for accuracy and relevance.