It's still used pretty extensively but it's becoming less effective to identify fraud as the techniques have become more widely known. These days the most effe

It's still used pretty extensively but it's becoming less effective to identify fraud as the techniques have become more widely known. These days the most effective use is guarding against account takeover. When logging in from an unknown device a user may go through additional authentication steps. Fraud ring counter this with man-in-the-browser attacks. There are a couple of vendors that offer it as a standalone service or bundle it with other offerings.