Skip to content

Log FxA "change of profile data" events and message-forwarding events to detect potential errors #81

@groovecoder

Description

@groovecoder

When a user changes their FxA email address, we want to log it alongside the logging of relayed message activity, so we don't accidentally trigger a fraudulent alarm for a legitimate change of a relay recipient's email address.

  1. Register an FxA Attached Service Notification handler for change of profile data.
  2. Log the profileDataChange event: H(real address)
  3. When relaying a message, log an email_relay event: relay_address.id, H(real address), H(relay address)
  4. In the fraud-detection pipeline, detect when:
    • An email_relay event contains a different H(real address) value than the previous email_relay for the same H(relay address) AND
    • There is no preceding profileDataChange event for the H(real address)
      • This signals that we are relaying emails to a new real address recipient, but there wasn't a change in the FXA primary email. Which could be fraudulent activity.

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions