{"id":"https://openalex.org/W7223963015","doi":"https://doi.org/10.5281/zenodo.23689734","title":"Stop Fraud Before It Executes: A Deployable 25-Step Security Architecture for EU Online Marketplaces","display_name":"Stop Fraud Before It Executes: A Deployable 25-Step Security Architecture for EU Online Marketplaces","publication_year":2026,"publication_date":"2026-10-27","ids":{"openalex":"https://openalex.org/W7223963015","doi":"https://doi.org/10.5281/zenodo.23689734"},"language":"en","primary_location":{"id":"doi:10.5281/zenodo.23689734","doi":"https://doi.org/10.5281/zenodo.23689734","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23689734","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article-journal"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.5281/zenodo.23689734","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5123721973","display_name":"Sangam Das","orcid":"https://orcid.org/0009-0001-4056-9213","observed_orcids":["https://orcid.org/0009-0001-4056-9213"]},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Das, Sangam","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5123721973"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.82441025,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.4722000062465668,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.4722000062465668,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.16920000314712524,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.13210000097751617,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/digital-services-act","display_name":"Digital Services Act","score":0.847000002861023},{"id":"https://openalex.org/keywords/algorithmic-accountability","display_name":"algorithmic accountability","score":0.8270000219345093},{"id":"https://openalex.org/keywords/advertising-transparency","display_name":"advertising transparency","score":0.6700000166893005},{"id":"https://openalex.org/keywords/very-large-online-platforms","display_name":"very large online platforms","score":0.6449999809265137},{"id":"https://openalex.org/keywords/transactional-databases","display_name":"transactional databases","score":0.38600000739097595},{"id":"https://openalex.org/keywords/api-gateway","display_name":"API gateway","score":0.6389999985694885}],"concepts":[{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.67330002784729},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.511900007724762},{"id":"https://openalex.org/C145097563","wikidata":"https://www.wikidata.org/wiki/Q1148747","display_name":"Payment","level":2,"score":0.48080000281333923},{"id":"https://openalex.org/C2779777834","wikidata":"https://www.wikidata.org/wiki/Q4202277","display_name":"Enforcement","level":2,"score":0.44760000705718994},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.4180999994277954},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.41690000891685486},{"id":"https://openalex.org/C75949130","wikidata":"https://www.wikidata.org/wiki/Q848010","display_name":"Database transaction","level":2,"score":0.36410000920295715},{"id":"https://openalex.org/C2780233690","wikidata":"https://www.wikidata.org/wiki/Q535347","display_name":"Transparency (behavior)","level":2,"score":0.3538999855518341},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.34119999408721924},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.33899998664855957},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.3255999982357025},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.30309998989105225},{"id":"https://openalex.org/C2779151265","wikidata":"https://www.wikidata.org/wiki/Q1156791","display_name":"Copying","level":2,"score":0.30059999227523804},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.2987000048160553},{"id":"https://openalex.org/C190978112","wikidata":"https://www.wikidata.org/wiki/Q17074350","display_name":"Payment processor","level":3,"score":0.2865000069141388},{"id":"https://openalex.org/C2776949292","wikidata":"https://www.wikidata.org/wiki/Q471855","display_name":"Jurisdiction","level":2,"score":0.28540000319480896},{"id":"https://openalex.org/C83860907","wikidata":"https://www.wikidata.org/wiki/Q135005","display_name":"Phishing","level":3,"score":0.2851000130176544},{"id":"https://openalex.org/C2781198186","wikidata":"https://www.wikidata.org/wiki/Q701521","display_name":"Collusion","level":2,"score":0.2815999984741211},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.28060001134872437},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.2694999873638153},{"id":"https://openalex.org/C203062551","wikidata":"https://www.wikidata.org/wiki/Q201339","display_name":"Public-key cryptography","level":3,"score":0.2660999894142151},{"id":"https://openalex.org/C2780945871","wikidata":"https://www.wikidata.org/wiki/Q194274","display_name":"Backup","level":2,"score":0.26600000262260437},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.26510000228881836},{"id":"https://openalex.org/C72648740","wikidata":"https://www.wikidata.org/wiki/Q658476","display_name":"Public key infrastructure","level":4,"score":0.26420000195503235},{"id":"https://openalex.org/C78597825","wikidata":"https://www.wikidata.org/wiki/Q484847","display_name":"E-commerce","level":2,"score":0.26010000705718994},{"id":"https://openalex.org/C2780938662","wikidata":"https://www.wikidata.org/wiki/Q973710","display_name":"Tying","level":2,"score":0.25780001282691956},{"id":"https://openalex.org/C2780262971","wikidata":"https://www.wikidata.org/wiki/Q44554","display_name":"Law enforcement","level":2,"score":0.2574999928474426},{"id":"https://openalex.org/C80958533","wikidata":"https://www.wikidata.org/wiki/Q1047174","display_name":"Audit trail","level":3,"score":0.2533999979496002}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.5281/zenodo.23689734","doi":"https://doi.org/10.5281/zenodo.23689734","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23689734","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article-journal"},{"id":"doi:10.5281/zenodo.23689735","doi":"https://doi.org/10.5281/zenodo.23689735","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23689735","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article-journal"}],"best_oa_location":{"id":"doi:10.5281/zenodo.23689734","doi":"https://doi.org/10.5281/zenodo.23689734","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23689734","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article-journal"},"sustainable_development_goals":[{"display_name":"Peace, justice, and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.666700005531311}],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W7214957036","https://openalex.org/W1974365722","https://openalex.org/W2623819121","https://openalex.org/W6911759285","https://openalex.org/W7160876181","https://openalex.org/W3189559112","https://openalex.org/W7202146286","https://openalex.org/W6893595994","https://openalex.org/W6939738951","https://openalex.org/W7132846042"],"abstract_inverted_index":{"Abstract":[0],"The":[1,102,173,199,255,294,326,411,452],"European":[2,335],"Commission's":[3],"investigation":[4,206],"announced":[5],"on":[6,47,395],"21":[7],"October":[8],"2026":[9],"concerning":[10],"fraudulent":[11,68],"accommodation":[12,69],"listings,":[13],"phishing":[14],"scams,":[15],"and":[16,50,87,122,130,149,159,195,204,236,267,279,287,346,380,390,406,422,430,448],"advertising":[17,150,280],"transparency":[18,281],"under":[19,282],"the":[20,137,304,308,437,440,443],"Digital":[21,337],"Services":[22,338],"Act":[23],"(DSA)":[24],"raises":[25],"a":[26,57,170,298,383,407,455,461],"fundamental":[27],"engineering":[28,248,274],"question:":[29],"Can":[30],"Very":[31,340],"Large":[32,341],"Online":[33,342],"Platforms":[34],"prevent":[35],"unauthorized":[36,81],"consequential":[37,139],"actions":[38],"before":[39],"they":[40],"affect":[41],"consumers,":[42],"rather":[43,314,459],"than":[44,315,460],"relying":[45],"primarily":[46],"fraud":[48,205,362],"detection":[49],"remediation":[51],"afterward?":[52],"This":[53],"technical":[54,332,378,450],"proposal":[55,327],"presents":[56],"25-step,":[58],"end-to-end":[59],"marketplace":[60,361],"fraud-prevention":[61],"architecture":[62,103],"addressing":[63],"three":[64],"representative":[65],"threats:":[66],"(i)":[67],"listings":[70],"promoted":[71],"through":[72],"paid":[73],"search":[74],"rankings;":[75],"(ii)":[76],"compromised":[77],"accommodation-provider":[78],"accounts":[79],"sending":[80],"payment":[82,91,147,197,234],"requests":[83],"to":[84,135,373,435],"genuine":[85],"customers;":[86],"(iii)":[88],"substitution":[89],"of":[90,217],"beneficiaries":[92],"after":[93],"an":[94,318],"otherwise":[95],"legitimate":[96],"transaction":[97],"has":[98,364],"received":[99],"upstream":[100,131],"authorization.":[101],"integrates":[104],"Virtual":[105],"Identity\u2013Compliance":[106],"Jurisdiction":[107],"Binding":[108],"(VI\u2013CJT),":[109],"Communication":[110],"Validation":[111],"(CVID),":[112],"Protected":[113],"Enforcement":[114],"Domains,":[115],"execution-time":[116],"Finality":[117,417],"Sink":[118],"verification,":[119,235],"algorithmic":[120],"accountability,":[121],"distributed":[123],"revocation.":[124],"Its":[125],"central":[126],"mechanism":[127],"distinguishes":[128],"authentication":[129],"approval":[132,323],"from":[133,207],"authority":[134],"produce":[136],"actual":[138,305],"effect.":[140],"Operations":[141],"involving":[142],"listing":[143,240],"publication,":[144,241],"message":[145,193],"dispatch,":[146],"execution,":[148],"presentation":[151],"are":[152,246,433],"checked":[153],"against":[154],"applicable":[155],"identity,":[156],"authorization,":[157],"transaction,":[158],"policy":[160,189],"state":[161],"at":[162,307],"their":[163],"respective":[164],"enforcement":[165,444],"boundaries.":[166],"Technical":[167],"feasibility":[168],"is":[169,297,324,328,392,454],"principal":[171,295],"focus.":[172],"proposed":[174,247],"mechanisms":[175],"can":[176],"be":[177],"implemented":[178],"using":[179],"technologies":[180],"available":[181,394],"today,":[182],"including":[183],"API":[184],"gateways,":[185],"cryptographic":[186],"identity":[187,320],"services,":[188],"engines,":[190],"transactional":[191],"databases,":[192],"brokers,":[194],"existing":[196],"infrastructure.":[198],"design":[200],"separates":[201],"expensive":[202],"onboarding":[203],"lightweight,":[208],"operation-specific":[209],"enforcement,":[210],"allowing":[211],"incremental":[212],"deployment":[213],"without":[214,289],"wholesale":[215],"replacement":[216],"legacy":[218],"systems.":[219],"Illustrative":[220],"additional":[221],"p95":[222],"latency":[223],"targets":[224],"include":[225],"10\u201340":[226],"milliseconds":[227,232,238],"for":[228,233,239,330],"protected":[229],"messaging,":[230],"15\u201360":[231],"20\u201380":[237],"excluding":[242],"external":[243],"processing.":[244],"These":[245],"targets,":[249],"not":[250,350],"experimentally":[251],"verified":[252],"performance":[253],"results.":[254],"article":[256],"examines":[257],"conventional-control":[258],"limitations,":[259],"implementation":[260,387,404,412,458],"workflows,":[261],"interoperability,":[262],"scalability,":[263],"revocation,":[264],"fail-closed":[265],"behavior,":[266],"adversarial":[268],"testing.":[269],"It":[270,348],"also":[271],"identifies":[272],"potential":[273],"contributions":[275],"toward":[276],"systemic-risk":[277],"mitigation":[278],"DSA":[283],"Articles":[284],"26,":[285],"34,":[286],"35,":[288],"claiming":[290],"automatic":[291],"regulatory":[292],"compliance.":[293],"contribution":[296],"technically":[299],"implementable":[300],"prevention":[301,363],"model:":[302],"verify":[303],"operation":[306],"boundary":[309],"where":[310],"it":[311],"becomes":[312],"effective,":[313],"assuming":[316],"that":[317,359],"authenticated":[319],"or":[321,357],"earlier":[322],"sufficient.":[325],"presented":[329],"independent":[331,377],"examination":[333,379],"by":[334,354,398],"policymakers,":[336],"Coordinators,":[339],"Platforms,":[343],"security":[344],"architects,":[345,428],"researchers.":[347],"does":[349],"allege":[351],"established":[352],"wrongdoing":[353],"any":[355],"platform":[356,427,463],"claim":[358],"complete":[360],"been":[365],"demonstrated.":[366],"Runnable":[367],"GitHub":[368],"Reference":[369],"Implementation":[370],"\u2014":[371],"Invitation":[372],"Engineers":[374],"To":[375],"support":[376],"reproducible":[381],"validation,":[382],"runnable":[384],"multi-language":[385],"reference":[386,457],"(Python,":[388],"Go":[389],"JavaScript)":[391],"publicly":[393],"GitHub,":[396],"accompanied":[397],"200":[399],"automated":[400],"tests,":[401,441],"execution":[402],"results,":[403],"documentation":[405],"non-commercial":[408],"research":[409,456],"license.":[410],"demonstrates":[413],"selected":[414],"VI\u2013CJT,":[415],"CVID,":[416],"Sink,":[418],"phishing-prevention,":[419],"payment-integrity,":[420],"advertising-transparency":[421],"revocation":[423],"mechanisms.":[424],"Security":[425],"engineers,":[426],"researchers":[429],"trust-and-safety":[431],"teams":[432],"invited":[434],"clone":[436],"repository,":[438],"run":[439],"examine":[442],"logic,":[445],"identify":[446],"limitations":[447],"provide":[449],"feedback.":[451],"code":[453],"production-certified":[462],"solution.":[464],"GitHub:":[465],"https://github.com/sangmdas/DAS-Marketplace-Fraud-Prevention-AI-Security-Phishing-Protection-Execution-Finality":[466]},"counts_by_year":[],"updated_date":"2026-11-04T10:54:05.112534","created_date":"2026-10-28T00:00:00"}