Abstract: Systems and methods for mitigating fraud in transactions including clustering account holders into groups with a cluster generator by jointly considering account activities as features in a clustering algorithm such that account holders in each group have similar behavior according to analysis of the features in the clustering algorithm. In each group, a list of suspicious transactions is detected with a suspicious behavior detector by determining outlier transactions for a transaction type of interest relative to transactions of each account holder in a group. An alert is generated and sent to users with a fraud suspicion response system to mitigate the suspicious transactions.

Abstract: A system, method, and computer program product are provided for suspicious remittance detection for a set of users. The method includes detecting, by a processor, unrealistic user location movements, based on login activities and remittance activities. The method includes detecting, by the processor, abnormal user remittance behavior based on account activities and the remittance activities by detecting any users who are silent for a threshold period of time and thereafter remit an amount of money greater than a threshold money amount. The method includes detecting, by the processor, abnormal overall user behavior, based a joint user profile determined across all users from the login activities, the remittance activities, and the account activities. The method includes aggregating, by the processor, detection results to generate a final list of suspicious transactions. The method includes performing, by the processor, loss preventative actions for each of the suspicious transactions in the final list.

Abstract: A method is provided for banking with suspicious remittance detection for a set of users. The method includes detecting, by a server having a processor operatively coupled to a memory, unrealistic user location movements, based on login activities and remittance activities. The method includes detecting abnormal user remittance behavior based on account activities and the remittance activities by detecting any users who are silent for a threshold period of time and thereafter remit an amount of money greater than a threshold money amount. The method includes detecting abnormal overall user behavior, based a joint user profile determined across all users from the login, remittance, and account activities. The method includes aggregating detection results to generate a final list of suspicious transactions. The method includes performing a loss preventative action for the suspicious transactions in the final list by preventing a completion of the suspicious transactions and notifying bank personnel.