Policy library

20+ fraud policies, ready to fire.

Search the library below. Every policy runs in monitor mode from day one. Enforce the ones you trust in one click.

22 policies

Fake Accounts

7 · Signup
SignupBlock

Block disposable email at signup

Denies signups using disposable or throwaway email addresses.

email.is_disposable
Use policy
SignupBlock

Block infrastructure IPs at signup

Denies signups from hosting providers, Tor exit nodes, and known proxies.

ip.is_hostingip.is_torip.is_proxy
Use policy
SignupBlock

Block signup velocity from same IP

Denies when the same IP creates too many accounts in one hour.

velocity.ip.trace_count_1h
Use policy
SignupBlock

Block headless browser at signup

Denies automated browser signups detected via device fingerprinting.

device.is_headlessdevice.automation_detected+ device snippet
Use policy
SignupChallenge

Challenge suspicious email signals

Challenges signups with high randomness scores, young domains, or suspicious TLDs.

email.email_randomness_scoreemail.domain_age_daysemail.suspicious_tld
Use policy
SignupChallenge

Challenge anonymizing networks at signup

Challenges signups arriving through VPN connections.

ip.is_vpn
Use policy
SignupChallenge

Challenge same device across many accounts

Challenges when one device fingerprint is seen across multiple user accounts in 24 hours.

velocity.device.distinct_user_ids_24h+ device snippet
Use policy

Account Takeover

9 · Login
LoginBlock

Block credential stuffing from same IP

Denies when the same IP generates too many failed logins in one hour.

velocity.ip.failed_count_1hevent.status
Use policy
LoginBlock

Block brute force on same account

Denies when the same user account accumulates too many failed logins in one hour.

velocity.user.failed_count_1hevent.status
Use policy
LoginBlock

Block automated login attempts

Denies login attempts from headless browsers or automation tools.

device.is_headlessdevice.automation_detected+ device snippet
Use policy
LoginBlock

Block anonymizing networks on login

Denies logins arriving through Tor or known proxy networks.

ip.is_torip.is_proxy
Use policy
LoginChallenge

Challenge login from new country

Challenges successful logins from a country this account has never been seen in before.

ip.is_new_country_for_userevent.status
Use policy
LoginChallenge

Challenge impossible travel

Challenges logins where the geographic distance from the last login is physically impossible given the time elapsed.

ip.impossible_travel
Use policy
LoginChallenge

Challenge high-risk login signals

Challenges logins from accounts seen on many IPs in 24 hours, or through a VPN.

velocity.user.distinct_ips_24hip.is_vpn
Use policy
LoginChallenge

Challenge login from new device

Challenges successful logins from a device the user has never used before.

device.is_new_for_userevent.status+ device snippet
Use policy
LoginChallenge

Challenge timezone mismatch on login

Challenges logins where the device timezone does not match the IP geolocation.

device.timezone_ip_mismatch+ device snippet
Use policy

SMS Pumping

6 · OTP
OTPBlock

Block risky phone numbers from receiving OTP

Denies OTP sends to VoIP numbers, burner phones, and invalid numbers.

phone.is_voipphone.is_burnerphone.valid
Use policy
OTPBlock

Block high-risk carrier country on OTP

Denies OTP sends to phone numbers registered in countries with elevated SMS pumping rates.

phone.carrier_country_risk
Use policy
OTPBlock

Block OTP velocity from same IP

Denies when the same IP triggers too many OTP requests in 5 minutes.

velocity.ip.trace_count_5m
Use policy
OTPBlock

Block OTP velocity from same user

Denies burst OTP requests from the same user in 5 minutes; challenges sustained velocity in 1 hour.

velocity.user.trace_count_5mvelocity.user.trace_count_1h
Use policy
OTPBlock

Block infrastructure on OTP requests

Denies OTP requests from Tor and hosting IPs; challenges known proxies.

ip.is_torip.is_hostingip.is_proxy
Use policy
OTPBlock

Block automated OTP requests

Denies OTP requests from headless browsers or automation tools.

device.is_headlessdevice.automation_detected+ device snippet
Use policy

Fraud protection made simple.

14-day free trial.