Download websites that use TruValidate

About TruValidate

Fraud tooling is bought to be invisible. The whole value of device intelligence collapses if the person being scored notices the scoring, so this category of code hides inside a checkout or a registration form, gathers signals about the browser and the behaviour driving it, and returns a risk verdict the visitor never sees. TruValidate works that way, a Proprietary product from TransUnion that reaches the page as JavaScript and sits in our Browser fingerprinting group.

Presence says something quite specific about the site carrying it. Nobody licenses fraud scoring for a brochure site. There has to be an account system or a payment flow, enough transaction volume for losses to matter, and somebody inside the organisation who owns risk and signed a contract about it. The reference address we hold for this entry sits on the vendor's own domain rather than a reseller's, so the buying relationship being observed is a direct one, and a company buying identity signals from a data provider of that size is usually buying more than one thing from them.

Detection is where honesty is required. Tags of this kind load on the flows that matter, which are exactly the flows a crawler does not complete. A survey that reads reachable pages sees the tag when it is present in the delivered markup, and misses every deployment that fires only after a visitor reaches a payment step or submits a login. As of October 2026 we detect TruValidate on 78 sites, and the correct reading of that figure is sites where the marker is publicly exposed, not customers the vendor has. Our data holds no first release year, no version signal and no country breakdown for this entry, which is normal for a tag that is versioned silently on the vendor's side.

The people who want the list are rarely the sites' own customers. Competing fraud and identity vendors want an account map. Privacy researchers measuring how widely device fingerprinting is deployed need prevalence, which is a statement about a population and cannot be made one domain at a time. Analysts tracking which sectors buy risk tooling want to intersect the set with ecommerce platforms, payment providers and login systems detected on the same domains. A lookup answers whether a single site exposes the tag. The downloadable file hands over the whole exposed set, with the caveat about undercounting attached to it rather than hidden from it.