What's the best way to detect if a user is using an actual mobile device (iPhone/Android) as opposed to a simulated user-agent or dev tools?
It's related to preventing fraud, and I know there's always ways around stuff like this, but my goal here is to just eliminate the 80% attempts that will give up rather than 100% prevention.
I've tried googling and I can only find using a user-agent which obviously won't work.