How criminals use data harvested from users’ devices to fool antifraud systems and siphon money from victims’ accounts.