Banks combine device information, account history, transaction velocity, merchant patterns, and customer confirmations to estimate risk. No single signal proves fraud; systems look for combinations that differ from normal behavior.
Consumers can help by keeping contact details current, responding promptly to genuine bank alerts, and reporting lost cards immediately.