Token Validation
User Principal Assessment
- If present, extract the user information from the
hid.emailclaim. This information may be used in fraud detection methods, such as: - Checking whether the email address belongs to a disposable email provider
- Reviewing past transaction history associated with the email address
- Applying other detection methods where the email address serves as the primary identifier
- If present, extract the
hid.verifierclaim. - If the
hid.verifieris “Experian”, extract thehid.verifiedclaim - This value may be used as part of a fraud risk score logic to infer a low risk for the transaction
- If the
- When KYC was applied to validate the user the agent represents, additional information, such as postal address and phone number, may be available in the claim. The additional information may be used in fraud detection engines (methods using phone and address validation) to infer the risk associated with the request.