Abstract: A device-hardware-based trusted application system includes database(s) storing details of the use of a first application included on user device, in association with a user device hardware identifier unique to hardware in the user device and a user account identifier unique to a user account utilized with the first application. The system receives a second merchant application transaction that is associated with a second merchant application, and analyzes the second merchant application transaction using a first risk model to determine that the second merchant application transaction should be declined. In response, the system then retrieves the first user device hardware identifier and the user account identifier from the second merchant application transaction, and uses them to access the database and approve the second merchant application transaction based on the details of the use of the first application.