Stop the fraud that keeps coming back.
Recognize the customers who don't.

A persistent device identity that holds through cookie clears, VPNs, and resets, so repeat fraudsters get caught instead of a fresh start, and your best customers move through friction-free. Live in days.

How it works
Operating SystemBrowser DetailsUser PreferencesDisplay & GraphicsNetwork InfoHardware InfoPlugins & ExtensionsCanvas & Fingerprint DataMore…
→
device_id response⚠ HIGH RISK
"arkose_id": "R53be5d914c7a9876e5f8b1x1a3c…",
"confidence_score": 99.986305,
"device_first_seen": "2024-03-22T08:15:44Z",
"device_last_seen": "2025-01-09T11:37:21Z",
"device_spoofing_detected": true,
"risk_score": 93,
"risk_band": "high",
"risk_insights": [
  "Headless_Browser_Confirmed",
  "Virtual_GPU_Confirmed",
  "Hardware_Signals_Suppressed",
  "Timezone_Mismatch_Detected"
]

Use cases

One ID. Every high-risk moment.

Account takeover

Recognize returning devices instantly and step up only when the device is new or flagged. Fewer friction events for good users, higher bar for attackers.

Payment fraud

Score device risk at authorization. Carry payment history across card rotations to catch fraud before it clears and cut false declines on trusted buyers.

Fake account creation

Link new signups to known bad devices and synthetic identity clusters before any account action. Stop farms at the door, not after the damage is done.

Promo & bonus abuse

Detect the same device cycling through multiple identities to claim offers, even when IPs, emails, and cookies are rotated each time.

Fraud-ring detection

Map the full identity graph of accounts, emails, and IPs tied to one device. Surface coordinated rings that look unrelated in single-session analysis.

Ban evasion

Recognize banned devices when they return under a new account or identity. Persistent ID survives cookie clears, VPNs, and fresh browser profiles.

See all use cases →

Full response payload

One call. Eight layers of intelligence.

Each session delivers a complete Device Intelligence response in one call: device identity, fingerprint signals, IP reputation, and session risk, all included, no secondary lookups needed.

Device ID
arkose_idconfidence_scorerisk_scorerisk_bandrisk_insightsdevice_first_seendevice_last_seendevice_spoofing_detectedstateful_device_idstateless_device_idstateful_challenge_bypassedstateful_challenges_bypassedstateful_change_reasonsstateless_device_id_versionstateless_device_id_previous
Fingerprint
browser_namecanvas_fingerprintoperating_systemscreen_resolutionhardware_concurrencyplatformtouch_supporttimezone_offsetbrowser_versioncolor_depthsession_storageindexed_databasemax_resolution_supportedcpu_class
IP Intelligence
user_ipis_vpnis_proxyis_torcountryispconnection_typeasnregioncitypublic_access_pointlatitude / longitudetimezone
Session Risk
risk_categoryrisk_bandglobal.scoreglobal.telltales[ ]custom.scorecustom.telltales[ ]
Aggregations
ip.short_term.countip.short_term.thresholdip.long_term.countip.long_term.thresholdip.short_term.interval_minutesip.long_term.interval_minutes
Session Details
solvedsession_is_legitsecurity_levelchallenge_typetelltale_list[ ]uaattemptedsuppressedpreviously_verifiedsession_timed_outtelltale_usertelltale_origin

View response example →

Identities are disposable. Devices aren't.

Every account, email, IP, and location a device has ever touched maps back to one anchor: Device ID. That's how fraud rings, device farms, and shared infrastructure get exposed, patterns single-session analysis is structurally blind to.

This device operates a fraud ring: 2 synthetic accounts sharing one disposable email address and a datacenter IP.
ACCTu_8821⚠ syntheticACCTu_3344⚠ ATO riskACCTu_5501⚠ syntheticACCTu_2278⚠ synthetic+7moreACCTu_9910✓ trusted EMAILj**@proton⚠ shared ×2EMAILs**@gmail✓ verified IP45.33.x.x⚠ datacenterIP10.0.x.x✓ residentialIP172.x.x.x✓ residential GEOCN⚠ VPN exitGEOUS✓ consistent Devicea91c…b71cFRAUD RING DETECTED12 accounts · shared email + IP + geo
DeviceAccountEmailIP addressLocationFlagged entity
ACCT
Account history
Every account this device has ever created or accessed, not just the current session.
12 flagged · 1 trusted
@
Shared emails
Email reuse across accounts surfaces synthetic identity clusters that appear unrelated.
1 disposable · 1 verified
IP
IP infrastructure
Datacenter IPs, proxy networks, and IP reuse across identities expose automated fraud.
1 datacenter · 2 residential
GEO
Location patterns
Impossible travel sequences and VPN exit nodes that single-session signals miss entirely.
1 VPN exit · 1 consistent
Days
From signup to live, not months
GDPR & CCPA
Privacy-first, compliance-ready by design
Hundreds of millions
Real devices analyzed daily
Persistent
Holds through VPNs, resets & spoofing
“

Arkose Device ID immediately gave us a new level of visibility. We were able to connect the dots and see how one device was being used to create hundreds of fraudulent accounts. It’s become a critical signal for us in preventing account takeover and shutting down large-scale abuse before it impacts our customers.

Head of Fraud & Identity, Global Entertainment & Media Company

41%
drop in account-takeover attempts

See the Devices. Know the Risk.

Start a trial and watch real device telemetry populate from your traffic within days.