Fraud Detection Risk Analysis Score

I would like to know how risk analysis score is allocated for events, for example signup event. So far, most scores I see from the logs is 0.6 and these are events from humans which I expect to be higher. Kindly educate me on what influences the risk score.
I also have situation where the score varies between 0.2 and 0.8 within minutes from different devices.