They are probably using something like https://www.biocatch.com/ and https://risk.lexisnexis.co.uk/products/threatmetrix

EDIT: yes they are