All Products
Search
Document Center

Fraud Detection:Features and parameters of Marketing Fraud Detection

Last Updated:Aug 26, 2026

The marketing fraud detection service helps enterprises counter bonus-hunting risks in marketing campaigns by identifying risky behavior and risky users accurately and in real time. It protects your marketing funds and improves the delivery efficiency of your marketing resources. Commonly covered campaign types include flash sales, coupon collection, and lucky draws.

Editions

To match the risk-control needs of enterprises in different industries and at different stages, marketing fraud detection provides a Basic edition and an Advanced edition. The following table compares the two editions.

FeatureBasicAdvanced
Real-time analysisSupportedSupported
Return valueScoreScore and risk tags
Device risk monitoringNot supportedSupported. Detects emulators, multi-boxing instances, device farms, group-control devices, cloud phones, and hook devices.
Device fingerprintingNot supportedSupported
Gang analysisNot supportedSupported
Log delivery to Simple Log ServiceNot supportedSupported. Authorize Alibaba Cloud Fraud Detection to deliver logs to Simple Log Service, which stores them free of charge for one year.

Service event parameters

Service event parameters are the request parameters carried in the ServiceParameters field of the common parameters, in JSON format. The following table lists the request parameters that a marketing fraud detection event must carry, in both the Basic edition and the Advanced edition.

Important

To accommodate the widest possible range of input formats, Alibaba Cloud Fraud Detection does not validate the business format of the strings that you pass in these service event parameters. You must validate the business format of your data yourself. For example, for the mobile field, the caller must verify that the value matches the mobile number format used in the Chinese mainland: 11 digits that start with 1.

ParameterEditionDescriptionTypeExampleRequired
accountIdBasic and AdvancedUnique account ID.String10123****No (Recommended)
operateTimeBasic and AdvancedOperation timestamp in seconds, in GMT. To scan historical data for risks, pass the historical operation time. Otherwise, an incorrect calculation time can cause false detections.Long1522555200 (2018-04-01 12:00:00 GMT)No
mobileBasic and AdvancedPhone number in <country code>-<number> format.String001-718123****No (Recommended)
ipBasic and AdvancedPublic IPv4 address of the client on the user side when the business event occurred.String42.120.XX.XXNo
emailBasic and AdvancedEmail address.Stringadmin****@aliyun.comYes
deviceTokenAdvanced onlyDevice token obtained from the Device Fraud Detection SDK.StringMzQvo1d7scyZ3tl_RcJZo_QOytAjy1LWRRLoRKo5oZSoo_JGj1ZoR5JGoRo5jcdn57gV5kxVRcLER5RQoZSvRZZQRcROjcMW5csZR_RGy_55RKJ_oooqZ7dSV5gRnKxOV7eWVQQjRtlRQoAjRcM0No (Recommended; significantly improves detection results)
nickNameBasic and AdvancedAccount alias.Stringadmin****No (Recommended)
userAgentBasic and AdvancedUser-Agent request header.StringMozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.84 Safari/537.36No (Recommended)
referBasic and AdvancedReferer request header.Stringhttps://www.alibabacloud.com/No (Recommended)
macBasic and AdvancedDevice MAC address.StringC0:77:36:2E:XX:XXNo (Recommended)
operateSourceBasic and AdvancedChannel where the operation originated. Valid values: PC, H5, App.StringPCNo (Recommended)
appVersionBasic and AdvancedApp version number.String1.0No (Recommended)
deviceTypeBasic and AdvancedDevice type. Valid values: PC, MOBILE.StringPCNo (Recommended)

Response parameters

The response returns a score for all editions, and tags for Advanced only. Both are contained in the Data response parameter.

For the business meaning of the score field in the Data response parameter, see the recommended operations in the following table. These recommendations are based on the experience of the Alibaba Cloud risk control team.

Note

In practice, you can choose flexibly based on your own business operations.

Score rangeRisk levelRecommended operation
[85, 100]HighPerform strong verification, such as SMS verification or real-person verification, or restrict permissions for high-risk operations.
[65, 85)Medium-highPerform moderate verification, such as a CAPTCHA, real-person verification, or SMS verification.
[35, 65)MediumPerform simple verification, such as SMS verification or a security question.
[0, 35)LowAllow the request, or tag the account and monitor it.

For the business meaning of the tags value in the Data field, contact Alibaba Cloud support.

For more information about common response parameters, see Common Parameters.