Anti-Fraud Codes

Reference tables for security and fraud detection systems. These codes appear in fraud-related events.

Anti-Fraud Check Type Codes

These codes identify the type of fraud detection check that triggered an incident. Used in the checkTypesId array in OnFraudIncidentCreated and OnFraudIncidentUpdated events.

Code	Check Type	Description
1	Same Device	Multiple accounts using same device
2	Same IP	Multiple accounts using same IP address
3	Same MAC	Multiple accounts using same MAC address
27	Virtualized MAC	Virtualized/spoofed MAC address detected
31	Virtual Machine	Player using virtual machine
30	Remote Desktop Protocol	RDP connection detected
32	Automated Desktop Activity	Bot or automation detected
29	Forbidden Process	Prohibited software running

Code	Check Type	Description
4	Chip Dumping	Intentionally losing chips to another player
5	Colluding	Players sharing information/coordinating play
6	Tournament Chip Dumping	Chip dumping in tournament play
7	Tournament Colluding	Collusion in tournament play
8	Fraudulent Heads-up	Suspicious heads-up play patterns
9	Fraudulent Fold	Suspicious folding patterns
10	Tournament Fraudulent Fold	Suspicious tournament folding
11	Fraudulent Showdown	Suspicious showdown behavior
12	Tournament Fraudulent Showdown	Suspicious tournament showdown
13	Chip Dumping Revision	Updated chip dumping detection
14	Tournament Chip Dumping Revision	Updated tournament chip dumping
15	Limp Raise	Suspicious limp-raise pattern
16	Tournament Limp Raise	Tournament limp-raise pattern
21	Tournament Endgame Dragging	Intentionally slowing tournament end
19	Jackpot Hunting	Suspicious jackpot targeting behavior

Code	Check Type	Description
17	Long Gaming Session	Unusually long continuous play
18	Fraudulent Relogin	Suspicious login/logout patterns
20	CashIn CashOut Limit Warning	Deposit/withdrawal pattern alert
24	Location Inconsistency	Geographic location mismatch
28	Timezone Inconsistency	Timezone doesn't match location

Code	Check Type	Description
22	Disposable Email	Registration with temporary email
23	Email Plus Addressing	Using email plus tricks ([email protected])
26	Same Payment Information	Multiple accounts with same payment details

These codes track the lifecycle of a fraud incident. Used in the status field of OnFraudIncidentUpdated and OnFraudIncidentStatusChangedAutomatically events.

Code	Status	Description
1	Open	New incident, pending review
2	Resolved	Issue has been addressed
3	Closed	Incident closed (no further action)
4	False Alarm	Determined to be false positive
5	Reopened	Previously closed, now under review again
6	Expired	Incident expired without resolution
7	Duplicated	Duplicate of another incident

When fraud is detected, the system can automatically apply reactions. These appear in OnFraudAutoReactionApplied events.

Action	Description
`kick`	Player removed from current table/game
`block`	Player account blocked
`forbid cash`	Player prohibited from cash games
`forbid tournament`	Player prohibited from tournaments