Active

Account Takeover Prevention

Detects credential, device, and location changes associated with takeover.

Rule builder

Evaluation logic

WHEN event.type = "withdrawal.attempted"

IF amount > 5000 AND device.age_hours < 24

AND aggregate.risk_score > 80

THEN require_review

Payment context

Amount and destination risk

Device context

Age and linked entity count

Aggregate risk

Weighted vendor consensus