Bot Detection for
Fintech & Banking

import requests

def check_login_risk(ip_address, user_id):
    """Pre-auth risk check for login attempts"""
    resp = requests.get(
        f"https://api.ipasis.com/check?ip={ip_address}",
        headers={"X-API-Key": IPASIS_KEY}
    )
    risk = resp.json()

    # Log for compliance/audit trail
    log_access_attempt(user_id, ip_address, risk)

    if risk["trust_score"] < 20:
        # Very high risk — datacenter/Tor
        return {
            "action": "BLOCK",
            "reason": risk["risk_level"],
            "require_mfa": True,
            "alert_security": True
        }

    if risk["trust_score"] < 50:
        # Medium risk — VPN or proxy
        return {
            "action": "CHALLENGE",
            "require_mfa": True,
            "ip_type": risk.get("ip_type"),
            "is_vpn": risk.get("is_vpn")
        }

    if risk["is_proxy"] or risk["is_vpn"]:
        # Low score but anonymized
        return {
            "action": "ALLOW_WITH_MFA",
            "require_mfa": True
        }

    # Clean residential IP
    return {"action": "ALLOW"}