Fraud Vectors Catalog - Antifraud.id

The FDS Scoring Engine detects 17 distinct fraud vectors in real time, each identified by a unique actionType code. Every vector has specific userData requirements and contributes different risk scores based on telemetry signals, device fingerprint, IP intelligence, graph insights, and deterministic rules.

How It Works

Each request must declare an actionType from the closed set of 17 fraud vector codes. The engine validates the payload, enriches it with device/IP/graph data, evaluates risk factors, and returns a score (0—100) with an APPROVE, REVIEW, or BLOCK decision.

Payment & Financial Fraud

Carding, BNPL, chargeback, promo abuse, seller fraud, money mule, COD abuse, return/refund abuse, loyalty points fraud

Account & Session Fraud

Device farm, bot farming, session hijack, account takeover, password reset abuse, OTP brute force

Content & Referral Fraud

Review bombing, content spam, affiliate/referral fraud

Cross-Cutting Checks

Device integrity, fraud rings, IP anonymization, blocklists — applied to every request

Risk Level Summary

Risk Level	Score Range	Decision	Action
CRITICAL	80—100	`BLOCK`	Auto-block
HIGH	51—79	`REVIEW`	Escalate to fraud ops
MEDIUM	26—50	`REVIEW`	Challenge (OTP/2FA/review)
LOW	0—25	`APPROVE`	Approve transaction

Fraud Vector Classification

`actionType`	Category	Billing
`carding_fraud`	Payment & Card Fraud	`high_value`
`promo_abuse`	Promo & Voucher Stacking	`high_value`
`bnpl_fraud`	Loan & BNPL Credit Fraud	`high_value`
`chargeback_abuse`	IAP & Friendly Fraud	`high_value`
`seller_fraud`	Escrow & Merchant Fraud	`high_value`
`money_mule`	AML / Money Pass-Through	`high_value`
`cod_non_payment_abuse`	COD Reject / Non-Payment	`high_value`
`returnRefundAbuse`	Return & Refund Abuse	`high_value`
`loyalty_points_fraud`	Loyalty & Rewards Abuse	`high_value`
`device_farm`	Device Farm & Emulators	`low_value`
`session_hijack`	Session Hijacking & ATO	`low_value`
`bot_farming`	Registration & Bot Massal	`low_value`
`account_takeover`	Brute Force & ATO	`low_value`
`content_spam`	Review & Content Spam	`low_value`
`referral_fraud`	Affiliate & Referral Fraud	`low_value`
`password_reset_abuse`	Account Security	`low_value`
`otpBruteforce`	Account Security	`low_value`

​How It Works