Behavioral Intelligence at Scale
for IDV and CIAM Workflows
The Largest Independent Identity Graph
for Risk and Trust
Deduce sees the majority of the U.S. transactional population several times a week, analyzing over 1.4B daily events involving 500M+ identity profiles across an always-growing network of +150,000 sites and apps.
It’s the largest independent identity graph for risk and trust, delivering unprecedented behavioral intelligence as the first line of defense against account-creation fraud and account-takeover (ATO) fraud.
Behavioral Intelligence in Line with
Your Account Creation and Authentication Workflow
The Deduce identity graph powers Deduce Identity Insights, a customizable series of risk and trust signals that inform every identity in a fraction of a second. The result is near real-time behavioral intelligence on the risk or trustworthiness of an identity, from one lightning-fast API query.
The Deduce Identity Graph
Delivers Precise, Near
Real-Time Insights
Deduce Identity Insights draws on the largest independent identity graph in the U.S. The Deduce Identity Graph combines privacy-compliant device, network, geo, and activity data to deliver continuous authentication insights for more than 500M+ unique identities.
More Identity Signals =
More Accurate Risk Assessment
Deduce analyzes more than 100 signals to build a complete, granular picture of identity profiles in the Deduce Identity Network. We are constantly adding new signals and can create custom signals to address specific risk or trust scenarios.
Case Study
Top 3 Credit Card Issuer-Marquee Application (U.S. Credit Card Originations)
Trusted Transactions
Real-time, continuous authentication of identities across the Deduce Identity Network provides intelligence to fast-track trusted users on both account creation and returning user authentication events.
Risky Transactions
Data shows that if the Deduce Identity Network has not previously seen an email address there is a 10X likelihood that the identity is fraudulent.
30% of identities seen on Deduce network 24h before application
Identity Insights for IDV Platforms
Streamline and Secure Your Account Creation Process
Is that new user who they say they are? Deduce analyzes their email and IP address against the Identity Network to place them along a continuum from highly trusted to highly risky.
Based on your organization’s risk threshold, you can use the Identity Insight score to:
- Reduce the cost of onboarding new customers
- Approve new customers faster
- Reduce account registration churn
- Reduce manual reviews
A major credit card issuer found that users who were unknown to the Deduce Identity Network were 10X more likely than known users to be fraud.
Identity Insights for CIAM Platforms
Protect and Enhance Your Trusted User Experience
Incorporate a sophisticated risk engine into your authentication workflow. Retain control of your risk and trust thresholds, so you can adapt instantly as the threat landscape changes.
A comprehensive suite of risk and trust signals help you:
- Reduce false positive MFA challenges by more than 50%
- Block obvious ATO attempts
- Extend trusted user session lengths and increase password entry attempts
- Send moderate or high-risk identities a Customer Alert for MFA
Smarter Insights Every Day
Every login analysis and Customer Alert makes the Deduce Identity Network smarter, so the granularity of Deduce Identity Insights is always improving. And when Deduce updates an identity profile at one site, it updates across the network to streamline the trusted customer experience.
Jane gets a new phone as a gift for the holidays. She’s excited about how much easier her powerful new device will make her life.
Instead, it’s a hassle, because most visits to sites and apps with her new phone trigger an MFA challenge, until each one knows her new device.
But when Jane visits a Deduce client site, she may get to skip the MFA. If not, one MFA is enough to recognize her across the entire Deduce network. Nice!
More Value for Your
Customer Authentication Spend
Deduce + Your IDV Platform:
- Removes email verification for trusted users to reduce signup churn by up to 80%
- Reduces or eliminates secondary IDV call costs for trusted users
- Reduces manual reviews by overcoming common risk signals with trust signals
- If the Deduce Identity Network hasn’t previously seen an identity, you won’t be charged for the request
Deduce + Your CIAM Platform:
- Captures more ATO fraud attempts than other solutions
- Reduces customer frustration and churn caused by repeated login requests and false-positive MFA challenges
- Extends trusted session length and password attempts for a smoother path to more purchases
Ready to Get Started?
See what Deduce Identity Insights can do for your account creation
and authentication workflows.
Trust Signals
|
ACTIVITY_FAMILIAR_IP
|
Is this a familiar IP for this user?
|
|
ACTIVITY_FAMILIAR_NETWORK
|
Is this a familiar carrier for this user?
|
|
ACTIVITY_FAMILIAR_DEVICE
|
Is this a familiar device for this user?
|
|
ACTIVITY_FAMILIAR_GEO_COUNTRY
|
Is this a familiar country for this user?
|
|
ACTIVITY_FAMILIAR_GEO_STATE
|
Is this a familiar state for this user?
|
|
ACTIVITY_FAMILIAR_GEO_CITY
|
Is this a familiar city for this user?
|
|
ACTIVITY_FAMILIAR_GEO_TIMEZONE
|
Is this a familiar time zone for this user?
|
|
ACTIVITY_FAMILIAR_TIMEOFDAY
|
Is this a familiar time of day for when the user typically interacts?
|
|
NETWORK_FAMILIAR_SUBNET
|
Clusters activity across subnets and detects network persistence across quickly changing IPs
|
Risk Signals
|
ACTIVITY_NEW_IP
|
Is this IP new to this identity?
|
|
ACTIVITY_NEW_SUBNET
|
Is this a new subnet for this identity?
|
|
ACTIVITY_NEW_NETWORK
|
Is this a new network for this identity?
|
|
RISK_IMPOSSIBLE_TRAVEL
|
Would it be impossible for user to travel to new location from last known location in the given timeframe?
|
|
RISK_IP_ACCOUNT_CYCLING
|
Has this IP frequently cycled over many different accounts
|
|
RISK_IP_HIGH_FAIL_RATIO
|
High recent fail ratio observed for this IP
|
|
RISK_IP_MALICIOUS_ACTIVITY
|
Malicious activity observed for this IP across our network
|
|
ACTIVITY_NEW_GEO_CITY
|
Is this a new city for this identity?
|
|
ACTIVITY_NEW_GEO_STATE
|
Is this a new state for this identity?
|
|
ACTIVITY_NEW_GEO_COUNTRY
|
Is this a new country for this identity?
|
|
ACTIVITY_NEW_GEO_TIMEZONE
|
Is this a new timezone for this identity?
|
|
RISK_ANOMALY_GEO_CITY
|
Anomalous city usage pattern observed
|
|
RISK_ANOMALY_GEO_STATE
|
Anomalous state usage pattern observed
|
|
RISK_ANOMALY_GEO_COUNTRY
|
Anomalous country usage pattern observed
|
|
ACTIVITY_SUSPICIOUS_TIMEOFDAY
|
Is this time of day not normal or suspicious for this identity?
|
|
NETWORK_VPN_CONFIRMED
|
Is this identity on a confirmed VPN?
|
|
NETWORK_VPN_SUSPECT
|
Is this identity suspected to be using a VPN?
|
|
NETWORK_PROXY
|
Is this identity using a known proxy?
|
|
NETWORK_CRAWLER
|
Is this identity using a crawler?
|
|
NETWORK_MALWARE
|
Is this identity using malware?
|
|
NETWORK_HOSTING
|
Is this identity using a hosted network?
|
|
NETWORK_INVALID
|
Network is unregistered on invalid
|
|
NETWORK_NON_US
|
Is this identity using a non-US network?
|
|
NETWORK_SUSPICIOUS_ISP
|
Network does not report a valid ISP
|
|
RISK_ANOMALY_SUBNET
|
Anomalous subnet usage pattern observed
|
|
RISK_ANOMALY_NETWORK_USAGE
|
Anomalous network usage pattern observed
|
|
ACTIVITY_NEW_DEVICE
|
Is this a new device for this identity?
|
|
DEVICE_CRAWLER
|
Is this likely a crawler?
|
|
DEVICE_DOWNGRADE
|
Is this an older version of a device we haven’t seen in a while?
|
|
RISK_ANOMALY_DEVICE_USAGE
|
Anomalous device usage pattern observed
|
|
RISK_DEVICE_CYCLING
|
Detects devices which cycle over multiple accounts
|
Info Signals
|
NEW_ACCOUNT
|
Is this account identified as less than 14 days old?
|
|
DEVICE_MOBILE
|
Is this a mobile device?
|
|
DEVICE_UPGRADE
|
Is this device newer?
|
|
ACTIVITY_INFREQUENT_DEVICE
|
Is this device infrequently seen for this identity?
|
|
NETWORK_MOBILE
|
Is the user on a mobile network?
|
|
NETWORK_CORPORATE
|
Is the user on a corporate network?
|
|
NETWORK_EDUCATION
|
Is the user on an education/school network?
|
|
NETWORK_VPN_CAPABLE
|
Is there a device running a background VPN service on this IP
|
|
ACTIVITY_INFREQUENT_GEO_CITY
|
Is this city infrequently seen for this identity?
|
|
ACTIVITY_INFREQUENT_GEO_STATE
|
Is this state infrequently seen for this identity?
|
|
ACTIVITY_INFREQUENT_GEO_COUNTRY
|
Is this country infrequently seen for this identity?
|
|
ACTIVITY_INFREQUENT_GEO_TIMEZONE
|
Is this timezone infrequently seen for this identity?
|
|
ACTIVITY_INFREQUENT_EMAIL
|
Is this email infrequently seen for this identity?
|
|
ACTIVITY_INFREQUENT_IP
|
Is this IP infrequently seen for this identity?
|
|
ACTIVITY_INFREQUENT_NETWORK
|
Is this network infrequently seen for this identity?
|
|
ACTIVITY_INFREQUENT_SUBNET
|
Is this subnet infrequently seen for this identity across quickly changing IPs?
|
Insights Signals
|
LAST SEEN EMAIL
|
When was the EMAIL last seen on the Deduce network?
|
|
FREQUENCY EMAIL
|
Number of times we’ve seen this email
|
|
IP_COUNT
|
Number of IPs associated with this email
|
|
MATCH
|
Have we seen this Email and IP together before?
|
|
LAST SEEN IP
|
When was this IP match last seen on the Deduce Network?
|
|
FREQUENCY IP-EMAIL
|
Number of times we’ve seen this match
|
|
RANK_IP/RANK_EMAIL
|
Ranking of IP against email & vice versa *
|
|
UA_BRAND
|
What is the device’s brand?
|
|
UA_NAME
|
What is the device’s name?
|
|
UA_OS
|
What operating system is the device running?
|
|
UA_BROWSER
|
What browser is the device using?
|
|
UA_VERSION
|
What is the browser version?
|
|
UA_TYPE
|
What is the browser type?
|
|
UA_DEVICE_TYPE
|
What is the device type?
|
|
COUNTRY
|
User’s detected country
|
|
STATE
|
User’s detected state
|
|
CITY
|
User’s detected city
|
|
LAT
|
User’s detected latitude
|
|
LONG
|
User’s detected longitude
|
|
ISP_ASN
|
ASN of ISP that owns this IP
|
|
ISP_NAME
|
Internet Service Provider that owns this IP
|
|
COMPANY_NAME
|
Company registered to this IP
|
|
CRAWLER_NAME
|
Name of the crawler if the IP belongs to one
|
|
VPN_NAME
|
Name of VPN service if user is detected to be using one
|
|
IS_VPN_CONFIRMED
|
Is this IP confirmed to be a part of a VPN?
|
|
IS_VPN_SUSPECT
|
Is this IP suspected to be a part of a VPN?
|
|
IS_VPN_CAPABLE
|
Is this IP capable of being a part of a VPN?
|
|
IS_TOR
|
Is this user using a TOR browser?
|
|
IS_HOSTING
|
Is this IP on a hosted network?
|
|
IS_CORPORATE
|
Is this IP on a corporate network?
|
|
IS_EDUCATION
|
Is this IP on an Education network?
|
|
IS_MOBILE
|
Is this IP on a mobile network?
|
|
IS_PROXY
|
Is this a proxy IP?
|