Gaming platform utilizing a fraud detection platform

Abstract

A system, computer-readable storage medium storing at least one program, and a computer-implemented method for detecting fraud in a social gaming environment is disclosed herein. For example, game events generated responsive to a player playing a game executing on a client device are received. The game events may then be used to build a player profile for the player. The player profile may characterize the game actions performed by the player. The player profile is then compared with a golden profile. The golden profile may specify an expected gaming behavior. Based on the comparison between the player profile and the expected gaming behavior specified by the golden profile, a player account associated with the player may be marked as suspicious.

1 . (canceled) 
     
     
         2 . A computer-implemented method comprising:
 receiving events generated responsive to user actions from a plurality of user sessions, wherein each respective user session comprises a threshold suspicious session length during which a threshold suspicious amount of the events are received;   using the events to build a user profile for the user, the user profile characterizing the user actions;   comparing, by at least one processor, the user profile with a golden profile, the golden profile specifying an expected session length during which an expected amount of events are received based on previous events from a plurality of a previous user sessions of at least one other user; and   based on the comparison between the user profile and the expected session behavior specified by the golden profile, marking a user account associated with the user as suspicious due to threshold suspicious session length and the threshold suspicious amount of the events of each of the plurality of user sessions.   
     
     
         3 . The computer-implemented method of  claim 2 , wherein receiving events generated responsive to user actions from a plurality of user sessions, wherein each respective user session comprises:
 receiving a first set of game events generated responsive to a player playing a first online game session of an online game executing on a client device, wherein the first online game session comprises a threshold suspicious game session length and the first set of game events comprises at least a threshold suspicious amount of game events; and   receiving a second set of game events generated responsive to the player playing a second online game session of the online game executing on the client device, wherein the second online game session comprises the threshold suspicious game session length and the second set of game events comprises at least the threshold suspicious amount of game events.   
     
     
         4 . The computer-implemented method of  claim 3 , further comprising:
 wherein the first set of game events includes a first instance of a first type of game action;   wherein the first set of game events includes a first instance of a second type of game action;   wherein the second set of game events includes a second instance of the first type of game action;   wherein the second set of game events includes a second instance of the second type of game action.   
     
     
         5 . The computer-implemented method of  claim 4 , further comprising:
 wherein the first set of game events includes a first selection of a first parcel of land represented in a farming simulation game, the first selection of the first parcel of land comprising a first request to harvest a first virtual crop;   wherein the first set of game events includes a first selection of a second parcel of land represented in the farming simulation game, the first selection of the second parcel of land comprising a first request to harvest a second virtual crop;   wherein the second set of game events includes a second selection of the first parcel of land represented in the farming simulation game, the second selection of the first parcel of land comprising a second request to harvest the first virtual crop;   wherein the second set of game events includes a second selection of the second parcel of land represented in the farming simulation game, the second selection of the second parcel of land comprising a second request to harvest a second virtual crop.   
     
     
         6 . The computer-implemented method of  claim 3 , further comprising:
 determining an amount of social network connections associated with the user account which corresponds to the player of the online game;   comparing the amount of social network connections to a threshold amount of social network connections; and   verifying the user account as suspicious based on the amount of social network connections being less than the threshold amount of social network connections.   
     
     
         7 . The computer-implemented method of  claim 3 , wherein using the game events to build the player profile comprises tracking at least one of the following metrics: a rate of online game activity, a pattern of game actions, a period of time per game session, or an interval time between game sessions. 
     
     
         8 . The computer-implemented method of  claim 7 , wherein the player profile specifies a rate of change for a property of the online game, the golden profile specifies an expected rate of change for the property of the online game; and
 wherein comparing the player profile with the golden profile includes comparing the rate of change for the property of the online game with the expected rate of change for the property of the online game.   
     
     
         9 . A non-transitory computer-readable medium storing executable instructions thereon, which, when executed by a processor, cause the processor to perform operations comprising:
 receiving events generated responsive to user actions from a plurality of user sessions, wherein each respective user session comprises a threshold suspicious session length during which a threshold suspicious amount of the events are received;   using the events to build a user profile for the user, the user profile characterizing the user actions;   comparing, by at least one processor, the user profile with a golden profile, the golden profile specifying an expected session length during which an expected amount of events are received based on previous events from a plurality of a previous user sessions of at least one other user; and   based on the comparison between the user profile and the expected session behavior specified by the golden profile, marking a user account associated with the user as suspicious due to threshold suspicious session length and the threshold suspicious amount of the events of each of the plurality of user sessions.   
     
     
         10 . The non-transitory computer-readable medium of  claim 9 , wherein receiving events generated responsive to user actions from a plurality of user sessions, wherein each respective user session comprises:
 receiving a first set of game events generated responsive to a player playing a first online game session of an online game executing on a client device, wherein the first online game session comprises a threshold suspicious game session length and the first set of game events comprises at least a threshold suspicious amount of game events; and   receiving a second set of game events generated responsive to the player playing a second online game session of the online game executing on the client device, wherein the second online game session comprises the threshold suspicious game session length and the second set of game events comprises at least the threshold suspicious amount of game events.   
     
     
         11 . The non-transitory computer-readable medium of  claim 10 , further comprising:
 wherein the first set of game events includes a first instance of a first type of game action;   wherein the first set of game events includes a first instance of a second type of game action;   wherein the second set of game events includes a second instance of the first type of game action;   wherein the second set of game events includes a second instance of the second type of game action.   
     
     
         12 . The non-transitory computer-readable medium of  claim 11 , further comprising:
 wherein the first set of game events includes a first selection of a first parcel of land represented in a farming simulation game, the first selection of the first parcel of land comprising a first request to harvest a first virtual crop;   wherein the first set of game events includes a first selection of a second parcel of land represented in the farming simulation game, the first selection of the second parcel of land comprising a first request to harvest a second virtual crop;   wherein the second set of game events includes a second selection of the first parcel of land represented in the farming simulation game, the second selection of the first parcel of land comprising a second request to harvest the first virtual crop;   wherein the second set of game events includes a second selection of the second parcel of land represented in the farming simulation game, the second selection of the second parcel of land comprising a second request to harvest a second virtual crop.   
     
     
         13 . The non-transitory computer-readable medium of  claim 10 , wherein the operations further comprise:
 determining an amount of social network connections associated with the user account which corresponds to the player of the online game;   comparing the amount of social network connections to a threshold amount of social network connections; and   verifying the user account as suspicious based on the amount of social network connections being less than the threshold amount of social network connections.   
     
     
         14 . The non-transitory computer-readable medium of  claim 10 , wherein using the game events to build the player profile comprises tracking at least one of the following metrics: a rate of online game activity, a pattern of game actions, a period of time per game session, or an interval time between game sessions. 
     
     
         15 . The non-transitory computer-readable medium of  claim 14 , wherein the player profile specifies a rate of change for a property of the online game, the golden profile specifies an expected rate of change for the property of the online game; and
 wherein comparing the player profile with the golden profile includes comparing the rate of change for the property of the online game with the expected rate of change for the property of the online game.   
     
     
         16 . A computer system comprising:
 a processor;   a memory device holding an instruction set executable on the processor to cause the computer system to perform operations comprising:   receiving events generated responsive to user actions from a plurality of user sessions, wherein each respective user session comprises a threshold suspicious session length during which a threshold suspicious amount of the events are received;   using the events to build a user profile for the user, the user profile characterizing the user actions;   comparing, by at least one processor, the user profile with a golden profile, the golden profile specifying an expected session length during which an expected amount of events are received based on previous events from a plurality of a previous user sessions of at least one other user; and   based on the comparison between the user profile and the expected session behavior specified by the golden profile, marking a user account associated with the user as suspicious due to threshold suspicious session length and the threshold suspicious amount of the events of each of the plurality of user sessions.   
     
     
         17 . The computer system of  claim 16 , wherein receiving events generated responsive to user actions from a plurality of user sessions, wherein each respective user session comprises:
 receiving a first set of game events generated responsive to a player playing a first online game session of an online game executing on a client device, wherein the first online game session comprises a threshold suspicious game session length and the first set of game events comprises at least a threshold suspicious amount of game events; and   receiving a second set of game events generated responsive to the player playing a second online game session of the online game executing on the client device, wherein the second online game session comprises the threshold suspicious game session length and the second set of game events comprises at least the threshold suspicious amount of game events.   
     
     
         18 . The computer system of  claim 17 , further comprising:
 wherein the first set of game events includes a first instance of a first type of game action;   wherein the first set of game events includes a first instance of a second type of game action;   wherein the second set of game events includes a second instance of the first type of game action;   wherein the second set of game events includes a second instance of the second type of game action.   
     
     
         19 . The computer system of  claim 18 , further comprising:
 wherein the first set of game events includes a first selection of a first parcel of land represented in a farming simulation game, the first selection of the first parcel of land comprising a first request to harvest a first virtual crop;   wherein the first set of game events includes a first selection of a second parcel of land represented in the farming simulation game, the first selection of the second parcel of land comprising a first request to harvest a second virtual crop;   wherein the second set of game events includes a second selection of the first parcel of land represented in the farming simulation game, the second selection of the first parcel of land comprising a second request to harvest the first virtual crop;   wherein the second set of game events includes a second selection of the second parcel of land represented in the farming simulation game, the second selection of the second parcel of land comprising a second request to harvest a second virtual crop.   
     
     
         20 . The computer system of  claim 17 , wherein the operations further comprise:
 determining an amount of social network connections associated with the user account which corresponds to the player of the online game;   comparing the amount of social network connections to a threshold amount of social network connections; and   verifying the user account as suspicious based on the amount of social network connections being less than the threshold amount of social network connections.   
     
     
         21 . The computer system of  claim 17 , wherein using the game events to build the player profile comprises tracking at least one of the following metrics: a rate of online game activity, a pattern of game actions, a period of time per game session, or an interval time between game sessions; and
 wherein the player profile specifies a rate of change for a property of the online game, the golden profile specifies an expected rate of change for the property of the online game; and   wherein comparing the player profile with the golden profile includes comparing the rate of change for the property of the online game with the expected rate of change for the property of the online game.