Device Fingerprinting

Device fingerprinting derives a probabilistic or deterministic identifier from hardware and software traits (OS, browser, fonts, sensors), network attributes (IP, ASN), and app telemetry to recognize devices across sessions. In compliance and fraud it links accounts, flags shared infrastructure, and powers velocity and anomaly detection. Privacy requirements demand minimization, notices and consent where applicable, and limited retention. Modern designs emphasize server-side features, integrity checks, and resistance to spoofing via attestation and behavioral signals. Fingerprints feed risk scores for onboarding and transactions, enabling step-up or blocks when patterns indicate mules, bots, or coordinated abuse. Governance covers explainability, bias checks for carrier NATs, and metrics such as collision and evasion rates.