Abstract: An apparatus for storing a set of events, is provided, the apparatus comprising one or more circuitry configured to: receive an electronic message comprising information of a first event between a first party and a second party, the first event being initiated by the first party; determine whether a record of the first event exists in a first storage unit; wherein when it is determined that the record of the first event does not exist, the one or more circuitry is configured to: determine whether any subsequent events between the second party and a third party are initiated by the second party within a predetermined time of the first event; and store an association between the second party and a first set of events, the first set of events comprising the first event and the subsequent event, in a second storage unit, when the subsequent event is initiated within the predetermined time.

Abstract: A method, apparatus and computer program product for reporting an exchange of messages between nodes in a network is provided by the present disclosure, the method comprising: receiving from a first device, using circuitry, a request for data for a target node, the data indicative of an exchange of messages between nodes in a network linked to the target node determining, by the circuitry, whether a request for data for the target node has previously been received; and, when a request for data for the target node has previously been received, the method comprises: building, by the circuitry, data indicative of the exchange of messages between nodes in the network linked to the target node; identifying, by the circuitry, a new portion of the data based on a comparison of the data with previous data which has been built for the target node; and reporting to the first device, by the circuitry, the new portion of the data.

Abstract: An apparatus, method and computer program product are provided, the apparatus for identifying a set of messages of interest in a network, the apparatus comprising circuitry configured to: receive information of a plurality of sets of messages which have been exchanged by nodes in a network; select a portion of the plurality of sets of messages which have been received using a property of a source message of each set of messages of the plurality of sets of messages; generate individual first values for the nodes of each set of messages of the selected portion of the plurality of sets of messages using a property of the nodes associated with each set of messages; and identify at least one set of messages of the selected portion of the plurality of sets of messages as a set of messages of interest using the individual first values which have been generated for the selected portion of the sets of messages.

Abstract: An apparatus for storing a set of events, is provided, the apparatus comprising one or more circuitry configured to: receive an electronic message comprising information of a first event between a first party and a second party, the first event being initiated by the first party; determine whether a record of the first event exists in a first storage unit; wherein when it is determined that the record of the first event does not exist, the one or more circuitry is configured to: determine whether any subsequent events between the second party and a third party are initiated by the second party within a predetermined time of the first event; and store an association between the second party and a first set of events, the first set of events comprising the first event and the subsequent event, in a second storage unit, when the subsequent event is initiated within the predetermined time.

Abstract: An apparatus for identifying an end node bank account in a network of bank accounts for funds from a fraudulent transaction, comprising processing circuitry configured to: identify a node account into which funds from the fraudulent transaction are paid; determine the number of account relationships associated with the node account; and identify the node account as an end node bank account when the number of account relationships is above a threshold value.