Definition
A device fingerprint is a set of attributes collected from a browser or app - user-agent string, screen resolution and colour depth, installed fonts, time zone, language, canvas and WebGL rendering signatures, audio-stack characteristics, hardware concurrency, battery and sensor quirks, and dozens more - that together are distinctive enough to recognise the same device across sessions even without cookies. Fingerprinting is used for fraud prevention, attribution, personalisation and access control, and it is also a privacy concern because it can track users who have cleared cookies or are in private-browsing mode.
In anti-fraud, the fingerprint is a core signal. It lets a system notice that fifty "different" user accounts are actually one device, that a claimed iPhone is rendering graphics like a Linux server, that a supposedly Brazilian user has a device configured for a different locale and time zone, or that a cohort of conversions shares an implausibly small set of fingerprints.
Consistency between the fingerprint and the other claims a session makes - IP geolocation, declared device, stated language - is often more informative than any single attribute.
In context
Media buyers running multiple ad accounts use antidetect browsers specifically to control the fingerprint, giving each account profile a distinct and internally consistent set of attributes so platforms treat them as separate devices. Platforms counter with deeper fingerprinting and cross-profile correlation - looking for the subtle signatures that a spoofing tool cannot fully randomise, and for statistical links between profiles that claim to be unrelated.
This is an ongoing measure-countermeasure dynamic with no stable end state.
For iGaming operators, fingerprinting supports responsible-gambling and fraud controls: detecting a self-excluded player returning under a new account on the same device, spotting multi-accounting for bonus abuse, and flagging a login from a device whose fingerprint does not match the account's history. Because fingerprinting has privacy implications, its use in regulated markets is constrained by data-protection law, so operators document what they collect, why, and for how long, and rely on it as one input to a risk model rather than as a sole basis for account action.
Worked example
An operator's fraud system flags a new account because its device fingerprint exactly matches one belonging to a player who self-excluded two months earlier. The account is held for manual review rather than automatically closed, and a support agent confirms the match through additional checks before applying the exclusion to the new account.
Related terms
Frequently asked questions
Browse more iGaming terms in our glossary.
← Back to glossary