Detection de Fraude

{
  "id": "dev_a1b2c3d4e5f6",
  "risk_score": 250,
  "risk_level": "medium",
  "is_new": false,
  "first_seen": "2024-12-01T08:00:00Z",
  "times_seen": 47,

  "signals": {
    "is_bot": false,
    "is_emulator": false,
    "is_vpn": true,
    "is_proxy": false,
    "is_tor": false,
    "is_datacenter": false,
    "timezone_mismatch": false
  },

  "ip_analysis": {
    "ip": "102.45.67.89",
    "country": "MA",
    "city": "Casablanca",
    "isp": "Maroc Telecom",
    "is_vpn": true,
    "vpn_provider": "NordVPN"
  },

  "linked_users": ["usr_123", "usr_456"],
  "linked_accounts": 2
}

// Rechercher des doublons
const duplicates = await txcloud.fraud.duplicates.search({
  type: 'face',  // ou 'document'
  image: selfieBase64,
  threshold: 0.85  // seuil de similarite
});

if (duplicates.matches.length > 0) {
  console.log('Doublon trouve!');

  for (const match of duplicates.matches) {
    console.log(`ID Correspondance: ${match.id}`);
    console.log(`Similarite: ${match.similarity}`);
    console.log(`Verification originale: ${match.verification_id}`);
  }
}

{
  "id": "dup_a1b2c3d4",
  "type": "face",
  "matches_found": true,
  "matches": [
    {
      "id": "match_xyz789",
      "verification_id": "ver_abc123",
      "similarity": 0.94,
      "created_at": "2024-11-15T10:00:00Z",
      "user_id": "usr_different_user"
    }
  ]
}

// Verifier la velocite avant d'autoriser l'action
const velocityCheck = await txcloud.fraud.velocity.check({
  user_id: userId,
  action: 'verification_attempt',
  window: '1h',
  ip_address: clientIp,
  device_id: deviceId
});

if (!velocityCheck.allowed) {
  console.log('Limite de debit depassee');
  console.log(`Reessayer apres: ${velocityCheck.retry_after}s`);
  throw new Error('Trop de tentatives. Veuillez reessayer plus tard.');
}

// Creer une regle de velocite
await txcloud.fraud.velocity.rules.create({
  name: 'Limite de Verification',
  description: 'Max 3 tentatives de verification par heure',
  action: 'verification_attempt',
  limit: 3,
  window: '1h',
  scope: 'user_id',  // ou 'ip_address', 'device_id'
  on_exceed: 'block',
  cooldown: '30m'
});

// Creer une regle personnalisee
const rule = await txcloud.fraud.rules.create({
  name: 'Nouvel Utilisateur Haut Risque',
  description: 'Signaler les nouveaux utilisateurs avec VPN et transactions de haute valeur',
  condition: `
    user.age_days < 7 AND
    device.is_vpn = true AND
    transaction.amount > 10000
  `,
  action: 'flag',
  score_adjustment: 300,
  enabled: true
});

// Ajouter a la liste de blocage
await txcloud.fraud.blocklist.add({
  type: 'device',
  value: deviceId,
  reason: 'confirmed_fraud',
  expires_in: null  // permanent
});

// Verifier la liste de blocage
const check = await txcloud.fraud.blocklist.check({
  type: 'device',
  value: deviceId
});

if (check.blocked) {
  console.log('Appareil bloque');
  console.log(`Raison: ${check.reason}`);
}

// Signaler un signal de fraude
const signal = await txcloud.fraud.signals.report({
  type: 'chargeback',
  user_id: userId,
  verification_id: verificationId,
  details: {
    amount: 5000,
    currency: 'MAD',
    transaction_id: 'txn_123'
  }
});

// Plus tard, confirmer ou rejeter
await txcloud.fraud.signals.confirm(signal.id, {
  notes: 'Chargeback confirme par la banque'
});

// Ou rejeter un faux positif
await txcloud.fraud.signals.dismiss(signal.id, {
  notes: 'Client a resolu le litige'
});

// Les signaux de fraude sont inclus dans la reponse de verification
const verification = await txcloud.identity.verify({
  document_front: doc,
  country: 'MA',
  checks: ['ocr', 'face_match', 'liveness', 'fraud']
});

// Acceder aux signaux de fraude
console.log('Controle fraude:', verification.checks.fraud);
// {
//   status: 'passed',
//   risk_score: 150,
//   duplicate_detected: false,
//   device_risk: 'low',
//   signals: ['known_device', 'normal_velocity']
// }

const summary = await txcloud.fraud.analytics.summary({
  period: '30d'
});

console.log('Total signaux:', summary.signals.total);
console.log('Fraude confirmee:', summary.signals.confirmed);
console.log('Taux faux positifs:', summary.false_positive_rate);

// Obtenir les tendances
const trends = await txcloud.fraud.analytics.trends({
  period: '30d',
  granularity: 'daily'
});