AI Weekly Malaysia

Cloudflare announced a new fraud investigation dashboard for its Account Abuse Protection (AAP) product, available first to Early Access customers. AAP lets a customer configure an identifier from their existing login/signup flow (email, username, or phone number), which Cloudflare cryptographically hashes into a per-domain 'Hashed User ID' that anchors each account's accumulated login and signup events plus edge-observed network and device signals. The pitch is a shift from point-in-time identity checks to a 'stateful trust model' where deviations from an account's established behavior are what surface abuse.

Why: The concrete decision here is whether you retain per-account behavioral history at all: if your abuse controls are still a pass/fail check at signup (password, OTP, liveness), this argues AI-generated identities defeat that because the check captures one moment. The actionable part you can copy without Cloudflare is the data model - hash a stable identifier per domain and append network/device signals to each login and signup event so you have a baseline to compare against. The rest is a vendor dashboard in Early Access with no published pricing, GA date, or API detail in this post, so there is nothing to migrate or budget for yet.