Cloudflare launches new fraud dashboard for Account Abuse Protection

Addressing Evolving Fraud Techniques

Traditional online fraud prevention relied on point-in-time identity verification methods like passwords or biometrics. However, the widespread availability of AI now allows fraudsters to fabricate or imitate legitimate identities, making these checks insufficient. Fraudsters can combine exposed credentials with synthetic media to bypass identity verification, meaning a passed check does not guarantee account trustworthiness.

Transition to Stateful Trust Models

Modern fraud prevention requires moving from stateless decisions to a stateful trust model. Instead of only asking if a person can pass a check, a stateful approach also considers if the activity aligns with the account's established historical behavior. Cloudflare's approach continuously reassesses trust at each interaction based on behavioral, network, and device patterns.

Cloudflare's Account Abuse Protection (AAP)

Cloudflare's Account Abuse Protection (AAP) creates stateful account overviews to assist website owners in detecting and investigating abuse during login and signup. Customers configure an identifier, such as an email or username, which Cloudflare cryptographically hashes to create a privacy-preserving Hashed User ID. This ID anchors an account's activity, accumulating historical context from each login or signup event and associated network and device signals observed at Cloudflare’s edge.

New Fraud Dashboard Features

Cloudflare is introducing a new fraud dashboard for AAP, initially accessible to Early Access customers. This workspace consolidates account overviews derived from activity across a website’s configured login and signup flows. The dashboard enables fraud analysts to examine their entire user population and identify suspicious trends, providing a stronger foundation for investigations by fraud teams.