Detecting Compromised Accounts Caused by Phone Number Recycling on E-Commerce Platforms: Taking Meituan As an Example

Min Gao,Shutong Chen,Yangbo Gao,Zhenhua Zhang,Yu Chen,Yupeng Li,Qiongzan Ye,Xin Wang,Yang Chen
DOI: https://doi.org/10.1631/fitee.2300291
IF: 2.526
2024-01-01
Frontiers of Information Technology & Electronic Engineering
Abstract:Phone number recycling (PNR) refers to the event wherein a mobile operator collects a disconnected number and reassigns it to a new owner. It has posed a threat to the reliability of the existing authentication solution for e-commerce platforms. Specifically, a new owner of a reassigned number can access the application account with which the number is associated, and may perform fraudulent activities. Existing solutions that employ a reassigned number database from mobile operators are costly for e-commerce platforms with large-scale users. Thus, alternative solutions that depend on only the information of the applications are imperative. In this work, we study the problem of detecting accounts that have been compromised owing to the reassignment of phone numbers. Our analysis on Meituan’s real-world dataset shows that compromised accounts have unique statistical features and temporal patterns. Based on the observations, we propose a novel model called temporal pattern and statistical feature fusion model (TSF) to tackle the problem, which integrates a temporal pattern encoder and a statistical feature encoder to capture behavioral evolutionary interaction and significant operation features. Extensive experiments on the Meituan and IEEE-CIS datasets show that TSF significantly outperforms the baselines, demonstrating its effectiveness in detecting compromised accounts due to reassigned numbers.
What problem does this paper attempt to address?