However, with all the various attack typologies available to fraudsters, what’s the draw when it comes to CNP fraud? The rest is pretty good.Card Not Present (CNP) fraud is constantly evolving starting with the computerisation of payment networks in the 70s, we have seen this type of fraud shift and transform from the early days whereby fraudsters had to go ‘trashing’, through the dot com boom, to today’s cybercrime landscape populated with bots, VPNs and sophisticated human-initiated attacks. These two things need to be improved for me. If you are Uber, your risk score will be very different from a banking client that is pushing funds. Because of this, it is very difficult to tune your future parameters and your risk score. For integration, you have to get it right as well, but it is very difficult to get it right because they don't help you in tuning your future parameters. Most companies don't see their value because it is such a difficult process. My work has been trying to simplify the integration process because integrations bring a lot of value. Integration should be easy based on what they are providing, but unfortunately, it is not. You have to understand and be an expert in low-level mobile applications to integrate this stuff. If you are integrating it into your workflow, it is very cumbersome and very difficult to integrate. SDK is probably where the biggest issue is. They give you a score against all those features for every application that you installed on it.

The last time I checked, there were about 400 or 500 features that they can stack against, which is pretty extensive. You can query against this stored information to find out whether your app is in a good, nice environment.

It is just that they have something that no one else can deal with, that is, massive amounts of big data about the malicious IP addresses, malicious device fingerprinting, the fingerprinting router devices, and the fingerprints. If you are running it on a simulator and trying to maliciously clone and copy IP addresses and stuff like that, they have a bunch of technologies, like routes section and all the other stuff. It is this stored information that I and my team find valuable it is not so much their technology. They have been storing all this information.

Over the years, they have been collecting and persisting globally across all the banking and financial services.

They have extensive historical records of all of that information, and that's probably the most valuable thing about ThreatMetrix. They have a huge database for routed devices and the devices that have been used in the past to commit fraud. They have a database of malicious IP addresses against which they check.

Threatmetrix integration guide