Compliance Decisions are scored with a combination of machine learning models and rules. Scores ultimately affect decisioning. The rule engine helps provide deterministic behavior and gives you control over the system. Rules can be modified in a dashboard by risk teams without engineering support. There are out-of-the-box rules for common fraud topologies to help you get started. Rules are evaluated in real-time (e.g. hundreds of milliseconds).

A rule is comprised of a set of conditions. A rule condition is composed of a signal, an operator, and a value (e.g. flag if there are >5 email addresses linked to a given device ID). Conditions can be combined together (e.g. AND and OR logic) for creating complex rules. For a given rule, you can select what risk level to set when the rule is triggered.

If multiple rules are triggered with different risk levels, the highest risk level is selected.

Signals

There are over 1600 signals that can be leveraged to create rules for KYC, bank account validation, and transaction monitoring. The available data depends on what checks are performed. Below are some examples of the signals provided:

1. Address: Number of customers or transactions associated with the address, risky countries, completeness score, validity score, how often seen across the network.
2. Bank account: Closed account status, likely return status, mismatch between the bank account owner and the user's name or address, possible neobank or credit union, risky routing number, likely invalid bank account, blocklisted by network.
3. Behavior: Auto-fill, copy paste, distraction or hesitation, typing speed, mouse movements.
4. Device: Number of emails / phone numbers / IP addresses / fraud events associated with the device, operating system anomaly, device language, distance between the IP address and device GPS, device emulator being used, blocklisted by network.
5. Email: Number of names or phone numbers associated with the email, contains the first or last name of the user, is the email verified, account or domain age, linked social media accounts, disposable or invalid domains, blocklisted by network, email reputation.
6. IP address: Type of IP address, internet service provider (ISP), location mismatches between IP and device data or user's submitted address, network speed, blocklisted by network.
7. Phone: Number of users or emails associated with the phone, is the phone number verified, phone type, phone carrier, date of birth match, SSN match, blocklisted by network, phone reputation.
8. Tax ID: Synthetic identity score, identity theft score, abuse score, name mismatches, name match, date of birth match, number of emails or phones or IP addresses associated with the tax ID, blocklisted by network.
9. Transaction: Amount, currency, higher than usual amount or frequency compared with the user's previous transactions or other users' transactions,..
10. User: Number of devices associated with the user, age of the account, age of the user, number of bank accounts, transactions activity patterns, updates to name or email or phone.
11. Watchlist: sanction risk, politically exposed person risk, adverse media risk, is the user on the 314a list, specific categories of offenses.

Functions

Functions can be used to combine different signals together for use in a condition. You can do arithmetic (e.g. add, subtract, multiply, divide), relational comparisons (greater than, greater than or equal to, less than, less than or equal to, not equals to, equals to), string similarity (e.g. Jaro-Winkler similiarity), contains (e.g. contains, not contains, contains any), prefixes / suffixes, and more.

Operators

A rule condition is composed of a signal, operator, and values (e.g. flag if there are >5 email addresses linked to a given device ID. Depending on the data type, different operators can be used:

1. Array: Equal to, not equal to, in, not in.
2. Boolean: Equal to, not equal to.
3. Float: Equal to, not equal to, greater than, greater than or equal to, less than, less than or equal to, in, not in.
4. Integer: Equal to, not equal to, greater than, greater than or equal to, less than, less than or equal to, in, not in.
5. String: Equals, not equals, in, not in.