Understanding risk assessments

Risk assessment types

Ironchip may provide four types of risk assessments, which depend on our confidence level in a given action performed by a device:

• fraud: Ironchip deems the action performed by the device as fraudulent, involved in a fraud
• high_risk: Ironchip deems the action (e.g. sign up, login) performed by the device to be potentially fraudulent, and advises you to take preventive actions in these scenarios.
• low_risk: ironchip considers this action performed by the device to be safe to accept.
• unknown_risk: ironchip is unable to provide a precise assessment at the time of the request.

Risk assessment evidences

Ironchip’s APIs rely on evidence to provide risk assessments. This decision is built on top of different analyses through distinct lenses.

The table below describes possible evidence values, their meaning, and which use cases they impact.

Understanding sensor match type

Match Type	Description
gps	When Ironchip is able to perform comparisons by GPS data.
wifi_scan	When Ironchip is able to perform comparisons by Wi-Fi sensors, but no matching connected networks are found.
wifi_connection	When Ironchip is able to perform comparisons by connected Wi-Fi networks.
mobile_networks	When Ironchip is able to perform comparisons by connected Mobile networks.

Risk assessment decision

Ironchip’s APIs rely on decisions to provide risk assessments. This decision is built on top of different analyses through distinct lenses.

The table below describes possible decisions values, their meaning, and which use cases they impact.

Decision	Description	Type
SIM Swapping / ATO	Detected Account Takeover based or not on Sim Swapping attack (depending on client user protection)	string
Phising	Detected phising attack from specific location (Multiple ATO)	string
Synthetic identity	Detected Synthetic Identity attack	string
New user	New user detected in Ironchip’s platform	string
Location fraud	Detected location fraud attempt by user comparing all location datasources	string
Banned location	Detected location from a banned place. In example: Location detected from russia	string
Device Swapping	Detected legitimate device swapping of a user	string
Location Swapping	Detected legitimate location swapping of a user	string
Common usage	Detected common usage	string