Payment device fingerprinting is the payments application of device fingerprinting, and that entry explains how the technique builds an identifier from a device's characteristics. This page covers what the term means when it is used by payment and fraud teams.
When a customer pays online or in an app, the merchant, gateway or issuer can collect signals about the device: browser and operating system versions, screen size, language, time zone, installed fonts, network details and, in apps, certain hardware identifiers where privacy rules allow. Combined, these produce a fingerprint that is usually stable enough to recognise the same device on a later visit. Fraud engines then ask questions such as whether a device has been used with many different cards, whether it was linked to past chargebacks, or whether a known customer is suddenly paying from an unfamiliar machine.
The fingerprint is one input among many in fraud detection, alongside velocity checks and behavioural biometrics. It also feeds card authentication: device data sent through 3-D Secure helps issuers approve low-risk payments without an extra challenge. Because fingerprinting collects information about people, it is subject to data protection and consent rules such as the EU's GDPR and ePrivacy rules, which limit what can be gathered and how long it is kept.