Fraud detection SDK

The SDK is built into your mobile or web application. On every sensitive operation it collects signals from the device and its environment and sends them to the engine, which returns a risk report you can read through the API.

The Ironchip mobile SDK captures device information, location-related signals (GPS, Wi-Fi), and user sessions to help differentiate attackers from legitimate users. To gather the risk assessment from the API, start by installing and configuring the SDK.

Supported platforms

The following are the latest SDK versions for each platform:

Platform	Latest version	Guide
Android	1.2.26	Android SDK
iOS	1.2.10	iOS SDK
Flutter	2.0.29	Flutter SDK
Web	1.0.0	Web SDK

See the release history of all the SDKs.

Flow of an operation

1. The app initializes the SDK with its API key.
2. On a sensitive operation (login, transfer, adding a beneficiary), the app asks the SDK to send a transaction with its own transaction_id.
3. The engine evaluates the operation and generates the report.
4. Your backend requests the report by transaction_id and decides: continue, ask for verification, or block.