Gate account takeover refund decisions from login anomaly, device change, transaction pattern, customer claim, and recovery status