Abstract: An anti-fraud token system is disclosed in which the authentication process is performed primarily on the client side. A client according is provided with an authentication list of websites for which authentication is required, and their respective authentic addresses. The client also asks a user to select a token, which may include graphics, text, and/or sound. When the user accesses an information source from the authentication list, the client notes that the address which the user is accessing is on the list. The client then displays the token as previously selected by the user to the user along with the accessed information, so that the user knows that the information he/she is accessing is authentic.

Abstract: A phishing detection agent is provided. In one embodiment, a user's browser includes a plug-in application or agent that may capture a visual record of a webpage and, with a cached copy of known, authentic websites provided to it via periodic updates, perform a series of image comparison functions to determine if the suspected website is attempting to deceive the user. The phishing detection agent is capable of performing an image recognition algorithm, such as logo recognition algorithm, optical character recognition, an image similarity algorithm, or combination of two or more of the above. If the suspected webpage corresponds to one of the authentic web pages, but the domain name of the suspected web page does not match the domain name of one of the authentic web pages, the suspected web page is flagged as a phishing web site.