Features and parameters of Marketing Fraud Detection
The marketing fraud detection service helps enterprises counter bonus-hunting risks in marketing campaigns by identifying risky behavior and risky users accurately and in real time. It protects your marketing funds and improves the delivery efficiency of your marketing resources. Commonly covered campaign types include flash sales, coupon collection, and lucky draws.
Editions
To match the risk-control needs of enterprises in different industries and at different stages, marketing fraud detection provides a Basic edition and an Advanced edition. The following table compares the two editions.
| Feature | Basic | Advanced |
|---|---|---|
| Real-time analysis | Supported | Supported |
| Return value | Score | Score and risk tags |
| Device risk monitoring | Not supported | Supported. Detects emulators, multi-boxing instances, device farms, group-control devices, cloud phones, and hook devices. |
| Device fingerprinting | Not supported | Supported |
| Gang analysis | Not supported | Supported |
| Log delivery to Simple Log Service | Not supported | Supported. Authorize Alibaba Cloud Fraud Detection to deliver logs to Simple Log Service, which stores them free of charge for one year. |
Service event parameters
Service event parameters are the request parameters carried in the ServiceParameters field of the common parameters, in JSON format. The following table lists the request parameters that a marketing fraud detection event must carry, in both the Basic edition and the Advanced edition.
To accommodate the widest possible range of input formats, Alibaba Cloud Fraud Detection does not validate the business format of the strings that you pass in these service event parameters. You must validate the business format of your data yourself. For example, for the mobile field, the caller must verify that the value matches the mobile number format used in the Chinese mainland: 11 digits that start with 1.
| Parameter | Edition | Description | Type | Example | Required |
|---|---|---|---|---|---|
accountId | Basic and Advanced | Unique account ID. | String | 10123**** | No (Recommended) |
operateTime | Basic and Advanced | Operation timestamp in seconds, in GMT. To scan historical data for risks, pass the historical operation time. Otherwise, an incorrect calculation time can cause false detections. | Long | 1522555200 (2018-04-01 12:00:00 GMT) | No |
mobile | Basic and Advanced | The mobile number. By default, this is a number from the Chinese mainland. For numbers from outside the Chinese mainland, include the country or region code in the format of Country code-Mobile number. | String |
| Yes (Provide one of the mobile, mobileMd5, and mobileSha256 fields) |
mobileMd5 | Basic and Advanced | The MD5 hash of an 11-digit mobile number that starts with 1. The value is a 32-character lowercase string of letters and digits. | String |
| Yes (Provide one of the mobile, mobileMd5, and mobileSha256 fields) |
mobileSha256 | Basic and Advanced | The SHA-256 hash of an 11-digit mobile number that starts with 1. The value is a 64-character lowercase string of letters and digits. | String |
| Yes (Provide one of the mobile, mobileMd5, and mobileSha256 fields) |
ip | Basic and Advanced | Public IPv4 address of the client on the user side when the business event occurred. | String | 42.120.XX.XX | No |
email | Basic and Advanced | Email address. | String | admin****@aliyun.com | No (Recommended) |
deviceToken | Advanced only | Device token obtained from the Device Fraud Detection SDK. | String | MzQvo1d7scyZ3tl_RcJZo_QOytAjy1LWRRLoRKo5oZSoo_JGj1ZoR5JGoRo5jcdn57gV5kxVRcLER5RQoZSvRZZQRcROjcMW5csZR_RGy_55RKJ_oooqZ7dSV5gRnKxOV7eWVQQjRtlRQoAjRcM0 | No (Recommended; significantly improves detection results) |
nickName | Basic and Advanced | Account alias. | String | admin**** | No (Recommended) |
userAgent | Basic and Advanced | User-Agent request header. | String | Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.84 Safari/537.36 | No (Recommended) |
refer | Basic and Advanced | Referer request header. | String | https://www.alibabacloud.com/ | No (Recommended) |
mac | Basic and Advanced | Device MAC address. | String | C0:77:36:2E:XX:XX | No (Recommended) |
operateSource | Basic and Advanced | Channel where the operation originated. Valid values: PC, H5, App. | String | PC | No (Recommended) |
appVersion | Basic and Advanced | App version number. | String | 1.0 | No (Recommended) |
deviceType | Basic and Advanced | Device type. Valid values: PC, MOBILE. | String | PC | No (Recommended) |
Response parameters
The response returns a score for all editions, and tags for Advanced only. Both are contained in the Data response parameter.
For the business meaning of the score field in the Data response parameter, see the recommended operations in the following table. These recommendations are based on the experience of the Alibaba Cloud risk control team.
In practice, you can choose flexibly based on your own business operations.
| Score range | Risk level | Recommended operation |
|---|---|---|
| [85, 100] | High | Perform strong verification, such as SMS verification or real-person verification, or restrict permissions for high-risk operations. |
| [65, 85) | Medium-high | Perform moderate verification, such as a CAPTCHA, real-person verification, or SMS verification. |
| [35, 65) | Medium | Perform simple verification, such as SMS verification or a security question. |
| [0, 35) | Low | Allow the request, or tag the account and monitor it. |
For the business meaning of the tags value in the Data field, see the Risk Label Interpretation module under Provisioning in the Fraud Detection console. Click here to go to the page.
For more information about common response parameters, see Common response parameters.