Risk FlagCategoryRisk LevelExplanation
high_device_riskDeviceHighDevice likely emulator, VM
proxy_detectedNetworkModerateSession on a proxy IP
vpn_detectedNetworkModerateSession on a VPN
datacenter_detectedNetworkModerateSession on a datacenter IP
recent_fraud_ipNetworkLowIP recently reported as fraud
impossible_travel_detectedImpersonationHighReferring session geolocation is far from session geolocation relative to timespan
repeat_faceMulti-AccountingHighFace has been seen in your application under a different account
repeat_deviceMulti-AccountingHighDevice has been used for multiple sessions
different_device_type_same_categoryImpersonationModerateReferring session and verification session are same device category (e.g., mobile), but are different types (iPhone, Android)
same_device_type_different_ipImpersonationModerateReferring session and verification session are same device type (e.g., iPhone), but are different IPs
referring_ip_mismatchImpersonationLowReferring session IP different than verification session IP
referring_user_agent_mismatchImpersonationLowReferring session user agent different than verification user agent
potential_link_sharingImpersonationLowReferring session is likely sharing the verification link