GlobalACCOUNT SHARING DETECTION

Identify when one account is shared by multiple people

Worthy correlates device fingerprint, IP, geography, card hash, name and email references, billing address, and phone number across your customer base. The core algorithm pulls every account linked to any matching signal and returns a verdict in real time.

  • 8 Identity Signals

  • Real time verdict per session

  • < 100 ms evaluation time

Password CheckIDENTITY SIGNALS

Eight signals. 
One verdict per account

Every authenticated session is scored against these signals. Each one is checked against every other account in your customer base. Matches feed the verdict.

Device ID

Fingerprint built from browser, OS, screen, fonts, and hardware capabilities.

IP address

Origin IP, ASN, datacenter detection, residential proxy classification.

Geographic location

Country, region, city resolved from IP. Cross-checked against billing country.

Card hash

Tokenized card reference. Matches across accounts surface shared payment instruments.

Name match

Exact and approximate matching on legal name. Surfaces spelling variants and order swaps.

Email match

Exact and similar email addresses. Detects plus-addressing, dot-tricks, and typo variants.

Billing address

Street, city, postal code matched with address-normalization for variant spellings.

Phone number

Normalized to E.164 international format. Matches reveal reused contact endpoints.

ChainACCOUNT LINKING

When one signal matches, 
every linked account surfaces

Worthy does not score accounts in isolation. Each signal on a session is checked across your full customer base. Any account sharing a matching signal is pulled into the evaluation and contributes to the verdict.

LINKED

lacct_4VK8R

2 matching signals

LINKED

acct_2BX6P

1 matching signal

LINKED

acct_9TQ1M

3 matching signals

FLAGGED SESSION

acct_7HQ2N

Active now · New York

SESSION acct_7HQ2N · LINKED ACCOUNT GRAPH

3 LINKED · HIGHLY CONFIDENT

Three accounts share one or more identity signals with the flagged session. Verdict returns highly confident with the full match trace.

Laptop CodeDEVELOPER API

Account-level sharing intelligence on every session

Every authenticated session returns a sharing assessment via the API. Read the score, inspect the contributing signals, and take the recommended action.

The object  account_sharing summarizes everything Worthy knows about the account.

  • verdict returns clear, monitor, or highly_confident depending on signal strength.

  • linked_accounts counts other accounts on the platform that share one or more identity signals.

  • signals_matched lists each identity signal that matched another account and how many matches were found

  • recommended_action returns allow, challenge, or terminate.

// GET /v1/accounts/acct_7HQ2N/sharing · RESPONSE
const response = {

	account_id: "acct_7HQ2N",
	account_sharing: { 
		verdict:"highly_confident",
		linked_accounts: 3,
		concurrent_sessions: 4, 
		distinct_devices: 4,
		distinct_geos: 4,
		signals_matched :[ 
			{ type: "device_id", matches: 2 },
			{ type: "billing_address", matches: 1 },
			{ type: "phone_number", matches: 3 },
			{ type: "email_similar", matches: 2 }
		],
		recommended_action: "challenge",
		evaluation_ms: 64
	}
};

GlobalOBSERVABILITY

Audit every flagged account with the full signal trace

The Account Sharing dashboard lists every flagged account, ranked by signal match count, with the contributing signals and recommended action visible at a glance. Open any account to inspect its linked-account graph and historical session log.

PAIRS WELL WITH

Account Sharing pairs with the rest of Risk-Worthy

Sharing signals feed the Cross-Merchant Fraud Network, the same accounts feed Autorisk on every charge, and the Customer Vault stores identity references for future evaluation.

Autorisk

Card testing defense scoring every charge against fourteen attack signatures.

Cross-Merchant
Fraud Network

Anonymized fraud signals shared across every Worthy merchant in real time.

Account Sharing Detection

Identify accounts being used by multiple people across eight identity signals.

Customer Vault

Store customer payment methods and risk profiles in a PCI-scoped vault.

FlashREADY WHEN YOU ARE

Surface every shared account 
across your customer base

Apply for a Worthy account and enable Account Sharing Detection through a single API call. No contracts, no setup fees, no engineering team required. Talk to sales for a custom package or volume pricing.