Topic starter
10/06/2026 10:42 pm
TL;DR: Fraudsters can rotate email, IP, phone, and payment details in seconds, while 44% use developer tools to simulate device behavior and synthetic identity fraud rose 300% in the US in a single year, according to SumSub. Device intelligence matters because it helps fraud teams make earlier, more proportionate decisions without over-relying on signals that attackers can easily spoof.
Editorial analysis by NHI Mgmt Group, based on content published by SumSub: “Device Intelligence in fraud prevention: best practices for 2026”.
By the numbers:
- In 2025, 44% of fraudsters used developer tools to simulate device behaviour.
- Synthetic identity fraud in the US rose 300% in a single year.
Key questions
Q: How should security teams use device intelligence in fraud prevention without overblocking users?
A: Use device intelligence as one input to risk-based decisions, not as a sole proof of identity.
Q: Why do device signals matter when fraudsters can rotate other identifiers quickly?
A: Device signals matter because email addresses, IPs, phone numbers, and payment details can change quickly, but device behaviour is harder to fake consistently across a full journey.
Q: What are the signs that device intelligence is failing in fraud decisioning?
A: Common signs include high false-positive rates, inconsistent outcomes across signup and login, and rules that trigger on isolated attributes without context.
Practitioner guidance
- Define stage-specific decision thresholds Map signup, login, recovery, payout and investigation to different approve, monitor, step up, review and block thresholds so device data is evaluated in context.
- Blend device data with identity and payment signals Use composite rules that combine device, behavioural and payment evidence so no single spoofable attribute drives the outcome on its own.
- Separate fingerprinting from decisioning Treat device fingerprinting as one input to an investigation model, not as a stand-alone proof of legitimacy or fraud.
Bottom line: Device intelligence is valuable because it gives fraud teams a harder-to-spoof signal when other customer attributes are easy to rotate.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 1 day ago by NHI Mgmt Group
11/06/2026 2:50 am
Device intelligence is now a governance layer, not just a detection layer. The article shows that fraud teams are using device data earlier in the lifecycle because identifiers that used to anchor decisions are easy to rotate. That shifts the control problem from after-the-fact investigation to pre-transaction decisioning. For identity programmes, the practical conclusion is that device context must sit inside access and transaction governance, not beside it.
A few things that frame the scale:
- 71% of NHIs are not rotated within recommended time frames, increasing the risk of compromise over time, according to Ultimate Guide to NHIs.
- Only 5.7% of organisations have full visibility into their service accounts, which is why identity signals become unreliable when governance is fragmented, according to Ultimate Guide to NHIs.
A question worth separating out:
Q: How can teams reduce false positives without missing fraud?
A: Set different thresholds for different lifecycle stages and transaction types. A low-risk login, a new account, and a payout request should not trigger the same response. Good programmes use graduated controls, so only aligned evidence triggers the strongest friction.
👉 Read our full editorial: Device intelligence and fraud decisions across the user lifecycle
12/06/2026 4:24 am
Device intelligence is now a fraud governance problem, not just a detection feature. The article shows that fraudsters can rotate easy-to-change attributes faster than many rules can react, which means static decisioning loses value quickly. Device intelligence matters because it gives teams a more durable signal to use when the identity surface is intentionally fluid. The practitioner conclusion is that device data has to be governed as part of the fraud decision model, not treated as an optional telemetry feed.
A few things that frame the scale:
- Nearly 60% of companies reported that fraud losses were still increasing in 2025.
A question worth separating out:
Q: Should teams prioritise device intelligence over identity verification or payment checks?
A: No. Device intelligence works best as a complementary control because each signal answers a different question. Identity verification confirms who is likely behind the interaction, payment checks assess transaction risk, and device intelligence helps judge whether the environment itself is trustworthy.
👉 Read our full editorial: Device intelligence and fraud decisions across the user lifecycle
This post was modified 1 day ago by NHI Mgmt Group