Trust and Safety

Content
Vision
Create a platform that consist of genuine users that represents the actual market share while
maintaining best in class user experience AND build a brand/organization that is trusted and
reputable among customers, employees and stakeholders.
Project team
Project team name Trust & Safety
Business Owner Vincent Raj Sebaskin
Nguyen Thi Hoa (Risk & Fraud team lead)
Dang Minh Hang (VinID PIC)
Tran Khanh Hoang (Vinshop PIC)
Product Manager Nguyen Khanh Duy
Product Owner Cao Van Tuan
Technical Owner Phan Hoang Thinh
Some types of fraudster
Promotion • Fake account
Abuse
• Fake GT

Account • Identity thief

Attacker
• Account stolen

• AML
Illegal
Transaction • Unauthorized
transaction
Figures on some campaigns
- What campaigns are most abused ? Loss number ?
Why needs T&S ?

Integration Prevention
Detection of
with other from abusing our
fraudster
domains platform
T&S services to VinID
• Reject fraudster claiming and redeeming voucher
Loyalty • Limit amount of voucher bad user received each campaign

• Reject ghost order

New Retail • Reject speculation order

• Detect unauthorized transaction

Payment • Prevention of account takeover
T&S services to VinID
• Block blacklist users from login
Platform • Detection of rooted devices and emulators

Targeted
• Avoid pushing voucher to bad users
Platform

• Provide Ops, tool and fraud information

CS/Operator
T&S services to Vinshop
• Block blacklist users from login
• Detection of rooted devices and emulators
Merchant
Platform • Provide GT fraud check

• Prevention of fraudulent transactions

Sale Portal

• Provide Ops, tool and fraud information

CS/Operator
Some real cases
Problem 1: Emulator can mimics behaviors of good users on IOS and Android devices
- Emulator can conduct risky transactions
- Emulator can run scripted and fraud attacks
- Emulator can circumvent rules-based fraud prevention
Solution:
- Detect emulators from Device_ID and block them from logging into our app
Result:
- Detected 3,338 Emulators
- Kicked out 7,982 times within September & October 2020
Some real cases
Problem 2: Bad users abusing our promo, causing financial loss and reducing promo effectiveness
- Bad user creates multiple account to exploit promo
- Bad user doesn’t use app without vouchers
Solution: Detect bad users via ML model, Rule engine, ID duplication, Device_ID, etc
- Do not distribute voucher to bad users
- Block bad users claiming/redeeming vouchers
Result:
- About 46k bad users & bad devices detected
- Bad list users integrated to Targeted Platform, eVoucher, NR, etc.
Roadmap