Fraud Protection
Manage fraud detection rules, blocked entities, and validation settings
Active Rules
10
Events Blocked
85,470
Blocked IPs
8
Blocked Devices
6
| Rule Name | Type | Condition | Action | Events Caught | Status |
|---|---|---|---|---|---|
| CTIT < 2 seconds | CTIT | Click-to-install time less than 2 seconds | Block | 14,280 | |
| CTIT < 5 seconds (flag) | CTIT | Click-to-install time between 2-5 seconds | Flag | 8,940 | |
| IP clicks > 100/hour | Click Volume | More than 100 clicks per hour from single IP | Block | 22,310 | |
| IP clicks > 50/hour | Click Volume | More than 50 clicks per hour from single IP | Flag | 5,670 | |
| Geo mismatch click vs install | Geo Mismatch | Click country differs from install country | Flag | 11,420 | |
| Device farm cluster > 10 from same /24 | Device Farm | More than 10 installs from same /24 subnet within 1 hour | Block | 6,890 | |
| Known bot user agents | Bot | User agent matches known bot signatures | Block | 3,240 | |
| Emulator detected | Device Farm | Device identified as emulator via SDK fingerprint | Block | 4,510 | |
| Abnormal session duration | Bot | Session duration < 1 second or > 24 hours | Flag | 1,870 | |
| Duplicate device IDs | Device Farm | Same device_id seen across > 5 different IPs in 24h | Block | 2,340 | |
| Click flooding from ad network | Click Volume | Network sends > 10K clicks with < 0.1% CVR | Alert | 980 | |
| Install time distribution anomaly | CTIT | Install time distribution is uniform (non-natural) | Flag | 3,120 |