According to one embodiment, a system comprises a memory comprising instructions, an interface, and a processor communicatively coupled to the memory and the interface. The processor is configured, when executing the instructions, to determine one or more characteristics of a user device, determine, based on the one or more characteristics of the user device, a risk level associated with the user device, and apply, to the user device, one or more access restrictions for an online account based on the determined risk level.