Only only 'you can', it is being done by thousands of companies across the world every second. (not these properties directly, just building a statistical model of fraudulent users and comparing transactions to that model to flag potentially fraudulent transactions - in wire transfers, online purchases, credit card use, ...)