Fraud and device fingerprinting glossary

Short, plain-English definitions of the terms that come up when you protect sign-ups, free trials, coupons, referrals and accounts from abuse. Each entry says what the term means, why it matters to an online business and where to read more.

• Chrome fingerprinting

  Chrome fingerprinting identifies a browser by reading its settings, fonts and hardware traits without cookies. Learn how it works and why sites use it.

• Credential stuffing

  Credential stuffing is an attack that tries leaked email and password pairs on other sites to take over accounts. See how it works and how to defend against it.

• Synthetic identity fraud

  Synthetic identity fraud combines real and made-up personal data into a new identity used to open accounts and borrow. Learn how it works and how to spot it.

• Friendly fraud

  Friendly fraud happens when a customer disputes a purchase they made and gets the money back. Learn why it happens, what it costs and how merchants respond.

• Return fraud

  Return fraud is the abuse of a refund or return policy, such as returning stolen goods or claiming items never arrived. See common types and how to curb them.

• BIN attack

  A BIN attack guesses card numbers from a known bank identification number, then tests them at a checkout. Learn how card testing works and how merchants respond.

• SMS pumping

  SMS pumping is fraud that triggers many text messages to premium numbers so the attacker earns a share of the fees. Learn how it works and how to limit it.

• Anti-detect browser

  An anti-detect browser lets one person run many profiles that each look like a separate device. Learn how they work and how sites spot them.

• Rooted and jailbroken devices

  A rooted or jailbroken device has had its built-in limits removed. Learn what rooting and jailbreak detection mean and why app owners care.

• Device ID

  A device ID is an identifier for a browser or phone that lets a service recognise it again. See the main types, how they differ and how fraud teams use them.