What is device fingerprinting in fraud detection?
Device fingerprinting in fraud detection is collecting many small technical attributes of a device or browser, such as screen size, fonts, graphics card behavior, time zone and network details, and combining them to recognize the device and check its story is consistent. Bots and spoofed devices often contradict themselves, for example claiming to be an iPhone while behaving like a Linux server.
For anti-fraud purposes, device fingerprinting is less about tracking people and more about spotting inconsistencies: a user agent that claims one browser while the JavaScript engine reveals another, a "mobile" device with a desktop graphics card, or thousands of "different" users sharing an identical fingerprint. It is central to catching device spoofing and headless browser bots.
Privacy law complicates fingerprinting for ad targeting, and browsers such as Safari and Firefox actively resist it. Most regulations allow narrowly scoped fraud prevention, but companies still need to disclose it and minimize data, in line with rules like GDPR.