All Products
Search

This Product

    Fraud Detection:Device Fraud Detection features and parameter description

    Document Center

    Fraud Detection:Device Fraud Detection features and parameter description

    Last Updated:Mar 31, 2026

    Device Fraud Detection protects mobile apps, H5 pages, and miniapps against device-level fraud. It detects emulator attacks, app multi-instance attacks, malicious tool execution, and tampered device parameters, protects against technical attacks, and generates a unique device ID. Deploy it in key business scenarios — registration, logon, ordering, and coupon collection — to reduce fraud losses and grow your genuine user base.

    Editions

    Device Fraud Detection offers two editions to match your risk control requirements.

    FeatureBasic EditionEnhanced Edition
    Real-time computingSupportedSupported
    Service responseRisk tagRisk tag and unique device ID
    Simple Log Service (SLS) deliveryNot supportedSupported. Grant authorization to enable log delivery. Logs are stored for one year at no charge.

    Service input parameters

    Service event parameters are passed via the ServiceParameters common request parameter in JSON format. For more information, see Common parameters.

    SDK for native apps on Android and iOS

    Field nameDescriptionData typeExampleRequired
    deviceTokenThe device token returned by the Device Fraud Detection SDK.StringTk9SSUQuMS***Yes
    A token is typically around 600 bytes. On poor network connections, tokens can exceed 2.5 KB. If you consistently receive oversized tokens, verify that the client has a stable network connection, and make sure at least 2 seconds elapse between calling init and calling getSession.

    Service response parameters

    Device Fraud Detection returns a risk tag and, in Advanced Edition, a device ID.

    Device ID

    The device ID is returned only in Advanced Edition (device_risk_pro). It is the value of the extend field in the Data response parameter.

    Risk tags

    The tags field in the Data response parameter contains the risk tags. Multiple tags are separated by commas (,).

    ValueDescription
    is_emulatorThe device is suspected of being an emulator.
    is_rootedThe device is suspected of being rooted.
    is_virtualThe device is suspected of running multiple instances of the app.

    For the full list of device risk tags, go to the Fraud Detection console and navigate to Provisioning. Go to console

    For common response parameters, see the "Common response parameters" section in Common parameters.