Abstract: A computer-implemented method to generate a hotspot confidence score for a hotspot in a network graph includes, receiving input data, wherein the input data includes a plurality of messages, each message containing a set of message data. The method further includes generating, based on the plurality of messages, a network graph. The method also includes identifying, in the network graph, a first hotspot. The method includes compiling a set of hotspot characteristics for the first hotspot. The method further includes receiving, in response to identifying the first hotspot, a first user feedback. The method also includes, generating, by a learning model, a hotspot confidence score for the first hotspot; and outputting the hotspot confidence score.

Abstract: A computer-implemented system, method and computer program product for detecting fraud. The system and method receives data representing transacting parties where a party transacts with another party to define a relationship therebetween. The received data is incorporated into a relationship network graph comprising nodes that capture data about transacting parties and corresponding information associated with each transaction. A risk model is run that is configured to determine a risk weight for the relation between nodes associated with the transacting parties based on the data captured in the relationship network graph. Then there is determined a degree of a party's association score based on risk scores of nodes associated with the party and a defined relationship with another suspicious party. The system then dynamically updates the risk weight of the relation based on the party's association score.

Abstract: A computer-implemented method to generate a hotspot confidence score for a hotspot in a network graph includes, receiving input data, wherein the input data includes a plurality of messages, each message containing a set of message data. The method further includes generating, based on the plurality of messages, a network graph. The method also includes identifying, in the network graph, a first hotspot. The method includes compiling a set of hotspot characteristics for the first hotspot. The method further includes receiving, in response to identifying the first hotspot, a first user feedback. The method also includes, generating, by a learning model, a hotspot confidence score for the first hotspot; and outputting the hotspot confidence score.