Understanding risk assessments

Device integrity

Provides information related to the device, to show if its data can be trusted.

Evidence	Description	Possible values
Root/Jailbreak	Informs if this device has root access or a jailbreak.	• Detected • Not detected
Emulator	Informs if this device is an emulator/simulator.	• Detected • Not detected
GPS spoofing	Informs if this device has an app that can fake GPS data.	• Detected • Not detected

Device reputation

Provides data related to this device’s reputation considering ironchip network effect and its behavior.

Evidence	Description	Possible values
Behavior reputation	Informs if this device has suspect behavior or is a trusted device.	Suspect: This device has similar behavior to devices with high risk, but is not associated with any known fraud. Allowed: This device was set as the main device of an account. Unknown: Ironchip has no positive, neither negative impression of this device. In cases of insufficient data, this will be the default answer.
Fraud reputation	Informs if this device was previously linked to a fraud report or if it was verified.	Confirmed fraud: This device is related to previously detected or reported frauds. This is a global status. Allowed: Its relation to a given account was reported as verified through feedbacks APIs. This status is local for the customer. Unknown: Ironchip has neither a positive nor negative impression of this device. In cases of insufficient data, this is the default answer.
Official store	Informs if the mobile application was installed from an official store like Google Play and App Store.	• Yes • No

Location behavior

Provides information related to device location behavior and its relation with the associated account.

Evidence	Description
Descriptive Location
Trusted hotspot
Distance from trusted location	Informs the distance of the device to the closest location known to be frequented by the associated account.
Last location timestamp	Informs the device location timestamp considered to match the trusted location.

Location sensors

Provides information related to which device sensors were used to at location related evidence.

Evidence	Description	Possible values
Location services	Informs if location services are allowed by the user	Enabled: User have allowed application to access location services. Disabled: User have reject application to access location services.
Sensor match type	Informs which type of sensor match was used to compare location data.	GPS: Comparisons could be made by GPS data. WiFi: Comparisons could be made by WiFi sensors. Connected WiFi: Comparisons could be made by user connected WiFi Mobile Networks: Comparisons could be made by connected Mobile networks.

IP Reputation

Provides information regarding device behavior and the declared address.

Evidence	Description	Possible values
Reputation	Informs if a detected IP address is suspicious to be fraudulent	• High risk • Medium • Low risk
VPN	Informs if a detected IP address was going through a VPN or Proxy	• Detected • Not detected • Unknown
TOR	Informs if a detected IP address was going through TOR network	• Detected • Not detected • Unknown