Unless Uber had already identified him as fraudulent, or he attempted to use a sign-up promotion again (and this is considered fraudulent) AND Uber are actually

Unless Uber had already identified him as fraudulent, or he attempted to use a sign-up promotion again (and this is considered fraudulent) AND Uber are actually using DeviceCheck for exactly those two purposes, then this is not the correct answer.