Integrate DEUNA's device fingerprint for anti-fraud and payment engines in your application.

You must generate your own fingerprints for most engines.

DEUNA offers a script / SDK that creates all necessary fingerprints to avoid manual tasks for each fingerprint script.

Integrates the device fingerprint of anti-fraud and payment engines.

Web SDK < 1.6

This section describes the current, published behavior. Use it if you run Web SDK below 1.6 or Cross-domain below 1.2.

1. Add the Mercado Pago script#

This script automatically loads everything needed to create the Device Fingerprint, which is sent when processing with Mercado Pago or whatever the anti-fraud or payment engine is.

Mercado Pago and other providers require this information to secure the transaction.

window.DEUNA_CREDENTIALS = {  
  <provider name>: {},  
}

// example
window.DEUNA_CREDENTIALS = {  
  MERCADOPAGO: {},  
}

2. Select the suppliers (only needed for Web SDK < 1.6)#

Select anti-fraud engine providers.

The following table contains attributes for the engines supported by the widget:

3. Generate the fingerprints#

Generate fingerprints depending on your integration type.

3.1 DEUNA Payment widget

See the Web SDK example for initPaymentWidget.

Expand

3.2 Direct API

Add the fingerprint script.

The script includes a DEUNA SDK that is capable of generating fingerprints from any provider under a single integration.

Web SDK

1. Follow the steps to add and initialize the Web SDK.
2. Use the script to generate the fingerprint.

<script>
    var script = document.createElement("script");
    script.id = "deuna-sdk";
    script.src = "https://cdn.deuna.io/web-sdk/v1.6/index.js";
    
    script.onload = async function () {  // ✅ Make function async
        // Initialize the SDK
        await DeunaSDK.initialize({
            publicApiKey: "<public api key>",
            env: "sandbox"  // "sandbox" or "production"
        });

        // Get the MasterDeviceId from DEUNA
        const fraudId = await DeunaSDK.generateFraudId({
            someProvider: {  // ✅ Replace with actual provider name
                // provider-specific data
            }
        });

        console.log("Fraud ID:", fraudId);
    };

    document.body.appendChild(script);
</script>

iOS SDK

1. Follow the steps to add and initialize the DEUNA SDK.
2. Use the function generateFraudId to generate the fingerprint.

deunaSDK.generateFraudId(
  params: [
    "RISKIFIED": [
      "storeDomain": "volaris.com"
    ]
  ]
) { fraudId in
   
}

Android SDK

1. Follow the steps to add and initialize the DEUNA SDK.
2. Use the function generateFraudId to generate the fingerprint.

deunaSDK.generateFraudId(
  context = context,
  params = mapOf(
    "RISKIFIED" to mapOf(
      "storeDomain" to "deuna.com"
    )
  ),
  callback = { fraudId ->
  }
)

3. Get the value of the device fingerprint and send it through Purchase V2:

  {
    "payer_info": {
      "email": "john@doe.com",
      "card_holder_dni": "12345678"
    },
    "payment_source": {
      "method_type": "debit_card",
      "card_info": {
        "card_id": "<card id>"
      }
    },
    "order": {
      "order_id": "DEUNA-NOW-69553619",
       // ...
    },
    "anti_fraud_info": { // dentro de este objeto se manda el fingerprint
      "device": {
        // mandar el fingerprint como base64
        "id": "<device fingerprint generated by the DEUNA Fraud SDK>"
      }
    }
  }

3.3 VTEX Connector

See this section: /docs/vtex-device-fingerprin

Web SDK ≥ 1.6

Use this section if you run Web SDK 1.6 or later.

In these versions, the DEUNA team configures the anti-fraud credentials. This changes the integration in three ways:

• You do not add the Mercado Pago script. The window.DEUNA_CREDENTIALS object is no longer required.
• You do not use the DEUNA Payment widget fingerprint step. It is no longer necessary.
• The merchant no longer sends fraudCredentials. DEUNA sets these values for you.

SIGNIFYD exception#

SIGNIFYD is the one provider that still needs merchant input in these versions. The merchant must pass the email from the user session in generateFraudId.

Initialization script#

Add and initialize the SDK. In these versions you call generateFraudId without merchant-supplied credentials:

<script>
    var script = document.createElement("script");
    script.id = "deuna-sdk";
    script.src = "https://cdn.deuna.io/web-sdk/v1.6/index.js";

    script.onload = async function () {  // ✅ Make function async
        await DeunaSDK.initialize({
            publicApiKey: "<public api key>",
            env: "sandbox"  // "sandbox" or "production"
        });

        const fraudId = await DeunaSDK.generateFraudId();
        console.log("Fraud ID:", fraudId);
    };

    document.body.appendChild(script);
</script>

SIGNIFYD snippet (≥ 1.6)#

For SIGNIFYD, pass the email from the user session:

const fraudId = await DeunaSDK.generateFraudId({
    SIGNIFYD: { email: "<email from user session>" }
});