> ## Documentation Index
> Fetch the complete documentation index at: https://docs.verisoul.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Risk Flags

> A comprehensive list of risk flags returned by Face Match

<table className="w-full border-collapse">
  <thead>
    <tr>
      <th className="p-3 text-left bg-gray-100 border">Risk Flag</th>
      <th className="p-3 text-left bg-gray-100 border">Category</th>
      <th className="p-3 text-left bg-gray-100 border">Risk Level</th>
      <th className="p-3 text-left bg-gray-100 border">Explanation</th>
    </tr>
  </thead>

  <tbody>
    <tr>
      <td className="p-3 border">high\_device\_risk</td>
      <td className="p-3 border">Device</td>
      <td className="p-3 border">High</td>
      <td className="p-3 border">Device likely emulator, VM</td>
    </tr>

    <tr>
      <td className="p-3 border">proxy\_detected</td>
      <td className="p-3 border">Network</td>
      <td className="p-3 border">Moderate</td>
      <td className="p-3 border">Session on a proxy IP</td>
    </tr>

    <tr>
      <td className="p-3 border">vpn\_detected</td>
      <td className="p-3 border">Network</td>
      <td className="p-3 border">Moderate</td>
      <td className="p-3 border">Session on a VPN</td>
    </tr>

    <tr>
      <td className="p-3 border">datacenter\_detected</td>
      <td className="p-3 border">Network</td>
      <td className="p-3 border">Moderate</td>
      <td className="p-3 border">Session on a datacenter IP</td>
    </tr>

    <tr>
      <td className="p-3 border">recent\_fraud\_ip</td>
      <td className="p-3 border">Network</td>
      <td className="p-3 border">Low</td>
      <td className="p-3 border">IP recently reported as fraud</td>
    </tr>

    <tr>
      <td className="p-3 border">impossible\_travel\_detected</td>
      <td className="p-3 border">Impersonation</td>
      <td className="p-3 border">High</td>
      <td className="p-3 border">Referring session geolocation is far from session geolocation relative to timespan</td>
    </tr>

    <tr>
      <td className="p-3 border">repeat\_face</td>
      <td className="p-3 border">Multi-Accounting</td>
      <td className="p-3 border">High</td>
      <td className="p-3 border">Face has been seen in your application under a different account</td>
    </tr>

    <tr>
      <td className="p-3 border">repeat\_device</td>
      <td className="p-3 border">Multi-Accounting</td>
      <td className="p-3 border">High</td>
      <td className="p-3 border">Device has been used for multiple sessions</td>
    </tr>

    <tr>
      <td className="p-3 border">different\_device\_type\_same\_category</td>
      <td className="p-3 border">Impersonation</td>
      <td className="p-3 border">Moderate</td>
      <td className="p-3 border">Referring session and verification session are same device category (e.g., mobile), but are different types (iPhone, Android)</td>
    </tr>

    <tr>
      <td className="p-3 border">same\_device\_type\_different\_ip</td>
      <td className="p-3 border">Impersonation</td>
      <td className="p-3 border">Moderate</td>
      <td className="p-3 border">Referring session and verification session are same device type (e.g., iPhone), but are different IPs</td>
    </tr>

    <tr>
      <td className="p-3 border">potential\_link\_sharing</td>
      <td className="p-3 border">Impersonation</td>
      <td className="p-3 border">Low</td>
      <td className="p-3 border">Referring session is likely sharing the verification link</td>
    </tr>

    <tr>
      <td className="p-3 border">location\_spoofing</td>
      <td className="p-3 border">Impersonation</td>
      <td className="p-3 border">High</td>
      <td className="p-3 border">The user is actively trying to obfuscate their current location</td>
    </tr>

    <tr>
      <td className="p-3 border">referring\_ip\_mismatch</td>
      <td className="p-3 border">Impersonation</td>
      <td className="p-3 border">Low</td>
      <td className="p-3 border">Referring session IP different than verification session IP</td>
    </tr>

    <tr>
      <td className="p-3 border">referring\_user\_agent\_mismatch</td>
      <td className="p-3 border">Impersonation</td>
      <td className="p-3 border">Low</td>
      <td className="p-3 border">Referring session user agent different than verification user agent</td>
    </tr>

    <tr>
      <td className="p-3 border">referring\_device\_timezone\_mismatch</td>
      <td className="p-3 border">Impersonation</td>
      <td className="p-3 border">Moderate</td>
      <td className="p-3 border">Referring session device timezone is a meaningfully different region than verification timezone</td>
    </tr>

    <tr>
      <td className="p-3 border">referring\_ip\_timezone\_mismatch</td>
      <td className="p-3 border">Impersonation</td>
      <td className="p-3 border">Moderate</td>
      <td className="p-3 border">Referring session ip timezone is a meaningfully different region than verification timezone</td>
    </tr>
  </tbody>
</table>