Skip to main content

# Risk

A risk is a pattern in the data of an attempt that may indicate fraudulent actions on the user's part.

Risks can be in three states:

1. Active: It affects the verdict of the attempt when triggered.

2. Inactive: It is retained in the attempt when triggered, but does not impact the verdict.

3. Disabled: It is not saved and does not affect the attempt's verdict.

The following risks exist in the system:

№ | Risk type | Reasons for triggering the risk
0 | MassAttack | Exceeds the number of validation requests sent after a certain date (current date minus specified period) with IP address. Parameters: Period - period, default is TimeSpan(“01:00:00”), Count - number of requests, default is 3. For example, if you do not change the default parameters of the risk, it will be triggered if there are more than three requests within an hour from one IP address.
1 | PeriodicAttack | The risk is triggered if a user from the same device tries to take biometrics on different applicants.
6 | DuplicateFace | The risk is triggered if the user tries to register biometrics that are already in the system.
7 | InconsistentMetadata | During validation, inconsistencies were found in the client's metadata. Possible inconsistencies: Phone Country: The country of the phone number does not match the country of the clientIp. TimeZone: The time zone on the client device does not match the time zone of the clientIp.
8 | MissingMetadata | The risk will be triggered if the metadata was not sent in the biometrics validation request.
9 | UntrustedIp | IP of registration does not match the IP of authorization.
10 | MotionControlFailed | The user's movements do not match the web component's instructions when recording a video.
11 | UntrustedDevice | The device fingerprint at registration does not match the device fingerprint at authorization.

note

Unlike other risks, MotionControl risk data is not stored in a list under the riskEvents key.

Instead, it is stored as a separate block of checks within the Validations object.

For example:

    "validations":
    {
        "motionControl": {
            "verdict": false,
            "motionControlInfo": [
                {
                  "pattern": "left",
                  "result": true
                },
                {
                  "pattern": "right",
                  "result": true
                },
                {
                  "pattern": "up",
                  "result": true
                },
                {
                  "pattern": "closer",
                  "result": true
                },
                {
                  "pattern": "farther",
                  "result": false
                }
            ]
        }
    }