Skip to content

Solutions

Same engine. Your risks, your rules.

FRAPE is configured per organisation: rules, lists, thresholds and fallback behaviour are yours. Below is how that plays out by industry and by moment in the customer lifecycle. Examples are illustrative.

By industry

Where FRAPE fits.

Payments & PSPs

Score card-not-present payments for many merchants from one platform, with each merchant kept in its own tenant and its own policy.

Typical risks

  • Card testing bursts
  • Stolen-card purchases
  • Merchant-specific risk appetite

Signals

  • Card-fingerprint velocity
  • BIN country against IP country
  • Device reuse across accounts

Events

  • payment
  • account_update

Marketplaces

Two-sided risk: fake sellers on one side, stolen payment methods on the other, and payouts that need a second look.

Typical risks

  • Seller collusion
  • Buyer account takeover
  • Payout to newly changed details

Signals

  • Shared-device networks
  • Recently changed payout details
  • Identity age

Events

  • signup
  • login
  • payment
  • payout

Fintech & lending

Applications, logins and money movement on one identity graph, so a profile change before a withdrawal is seen in context.

Typical risks

  • Synthetic or repeat applicants
  • Account takeover
  • Rapid withdrawal after a profile change

Signals

  • Strong-alias matches
  • Login velocity per identity
  • Email or phone changes

Events

  • signup
  • login
  • account_update
  • payout

Digital goods & gaming

Instant delivery leaves no time for manual review on every order, so rules settle the obvious cases and queues take the rest.

Typical risks

  • Bonus and promotion abuse
  • Multi-accounting
  • Resale of stolen-card purchases

Signals

  • Device and browser signals
  • Accounts per device
  • Purchase velocity

Events

  • signup
  • payment

Subscriptions & SaaS

Stop free-trial farming and card testing at sign-up without adding friction for the customers you want to keep.

Typical risks

  • Trial farming
  • Card testing via small charges
  • Shared or resold accounts

Signals

  • Repeat identities
  • Card-fingerprint reuse
  • Login patterns

Events

  • signup
  • login
  • payment

By moment

Five event types, one identity, one policy.

Each use case is an event type on the same scoring API, so a login and the payout that follows it are judged together.
  1. Sign-up

    type: signup

    What it stops

    Repeat and throwaway identities, multi-accounting, promotion abuse.

    Catch throwaway and repeat identities before they get an account: alias reuse, device history and list hits.

    Example

    Device already linked to several recent sign-ups → signal rule raises the score; policy asks for a challenge.

  2. Login

    type: login

    What it stops

    Credential stuffing and account takeover.

    Spot takeover attempts from new devices, unusual networks and bursts of attempts across accounts.

    Example

    Burst of logins for one identity from a new device and network → REVIEW, with the reasons recorded.

  3. Profile change

    type: account_update

    What it stops

    Takeover follow-through: changed email, phone or payout details.

    Treat changes to email, phone or payout details as the high-risk moments they are, with step-up when needed.

    Example

    Payout details changed minutes after a login from a new device → step-up challenge before the change sticks.

  4. Payment

    type: payment

    What it stops

    Stolen cards, card testing, mismatched geography.

    Score a purchase by card fingerprint, BIN, device and velocity — never by card number, which is refused.

    Example

    Card fingerprint on the organisation’s blocklist → terminal rule declines with no provider or Decision Core call.

  5. Payout

    type: payout

    What it stops

    Cash-out of compromised or synthetic accounts.

    Hold money movement that does not fit the identity’s history before it leaves the platform.

    Example

    First payout to new details on a young identity → REVIEW and an alert for the analyst queue.

Design partners

Help shape what FRAPE decides next.

We are working with a small number of teams who score payments, sign-ups, logins or payouts and want decisions they can explain line by line. Bring your rules and your edge cases.