Fraud detection based on an analysis of messages in a messaging account

Patent metadata

Field	Value
Publication number	US-10817879-B2
Application number	US-201916241580-A
Country	US
Kind code	B2
Filing date	Jan 7, 2019
Priority date	Jan 7, 2019
Publication date	Oct 27, 2020
Grant date	Oct 27, 2020

Abstract

A device may obtain a notification that a transaction occurred, where the transaction is associated with a financial account of a user, and a merchant. The device may determine that the merchant is associated with providing confirmation messages for transactions, and may process, based on determining that the merchant is associated with providing confirmation messages, one or more messages in a messaging account associated with the user to determine whether the messaging account includes a confirmation message associated with the transaction. The device may determine that the messaging account does not include any confirmation message associated with the transaction, may determine a likelihood that the transaction was unauthorized based on the messaging account not including a confirmation message, and may perform an action associated with the financial account of the user based on the likelihood that the transaction was unauthorized.

First claim

What is claimed is:

1. A device, comprising:
one or more memories; and
one or more processors, communicatively coupled to the one or more memories, configured to:
receive access information that permits access to messages associated with a messaging account of a user;
obtain a notification that a transaction occurred,
wherein the transaction is associated with:
a financial account of the user, and

a merchant;

determine that the merchant is associated with providing confirmation messages for transactions;
pre-process a plurality of messages in the messaging account, based on determining that the merchant is associated with providing confirmation messages and based on one or more characteristics of the messages and one or more characteristics of the transaction, to filter at least one message from the plurality of messages and identify one or more messages, of the plurality of messages, for further processing;
process, based on the access information and the pre-processing, the one or more messages to determine whether the messaging account includes a confirmation message,
wherein the one or more messages were received in the messaging account within a first threshold time period after the transaction, and
wherein the one or more messages are processed using at least one technique,
wherein the at least one technique includes one or more of:
an image processing technique that comprises at least one of:
an optical character recognition technique, or
a computer vision technique,

a text processing technique that comprises a natural language processing technique, or
a code processing technique that comprises analyzing computer code associated with the confirmation message;

determine, based on processing the one or more messages using the at least one technique, that the messaging account does not include any confirmation message associated with the transaction;
determine a likelihood that the transaction was unauthorized based on the messaging account not including the confirmation message; and
perform an action associated with the financial account of the user based on the likelihood that the transaction was unauthorized.

2. The device of claim 1 , wherein the one or more processors, when determining that the merchant is associated with providing confirmation messages for transactions, are configured to:
identify a previous confirmation message in the messaging account,
wherein the previous confirmation message is associated with a previous transaction between the merchant and the user; and

determine that the merchant is associated with providing confirmation messages based on the previous confirmation message.

3. The device of claim 1 , wherein the one or more processors, when performing the action, are configured to:
send a request to a user device to permit the user to verify whether the transaction was authorized;
receive an indication of whether the transaction was authorized; and
train a fraud analysis model based on the indication of whether the transaction was authorized and information associated with the transaction.

4. The device of claim 1 , wherein the one or more processors, when performing the action, are configured to:
send a notification message that includes at least one of:
a request to the user to permit the user to verify that the transaction was authorized;
an indication that the transaction was likely unauthorized; or
an indication that information associated with the financial account has likely been compromised by an unauthorized user.

5. The device of claim 1 , wherein the one or more processors, when performing the action, are configured to at least one of:
prevent any future transactions associated with the financial account, or
flag the financial account as potentially compromised by an unauthorized user.

6. A non-transitory computer-readable medium storing instructions, the instructions comprising:
one or more instructions that, when executed by one or more processors, cause the one or more processors to:
receive access information that permits access to messages associated with a messaging account of a user;
obtain a notification that a transaction occurred,
wherein the transaction is associated with:
a financial account of the user, and
a merchant;

determine that the merchant provided a previous confirmation message for a previous transaction between the user and the merchant;
pre-process a plurality of messages in the messaging account, based on determining that the merchant is associated with providing confirmation messages and based on one or more characteristics of the messages and one or more characteristics of the transaction, to filter at least one message from the plurality of messages and identify a first set of messages, of the plurality of messages, for further processing;
process, based on the access information and based on the pre-processing, the first set of the messages in the messaging account to identify whether the first set of the messages includes a confirmation message,
wherein the first set of the messages were received in the messaging account within a first threshold time period after the transaction, and
wherein the first set of the messages are processed using at least one technique,
wherein the at least one technique includes one or more of:
an image processing technique that comprises at least one of:
an optical character recognition technique, or
a computer vision technique,

a text processing technique that comprises a natural language processing technique, or
a code processing technique that comprises analyzing computer code associated with the confirmation message;

determine, based on processing the first set of the messages using the at least one technique, that the first set of the messages does not include the confirmation message based on processing the first set of the messages;
determine a likelihood that the transaction was unauthorized based on the messaging account not including the confirmation message; and
perform an action associated with the financial account of the user based on determining the likelihood that the transaction was unauthorized.

7. The non-transitory computer-readable medium of claim 6 , wherein the confirmation message comprises a receipt associated with the transaction.

8. The non-transitory computer-readable medium of claim 6 , wherein the one or more instructions, that cause the one or more processors to process the first set of the messages, further cause the one or more processors to:
receive a template confirmation message associated with the merchant; and
process the first set of the messages to identify, based on the template confirmation message, whether the first set of the messages includes the confirmation message.

9. The non-transitory computer-readable medium of claim 6 , wherein the one or more instructions, when executed by the one or more processors, further cause the one or more processors to:
determine a likelihood that the transaction is fraudulent based on a characteristic of the transaction; and
process the first set of the messages based on the likelihood that the transaction is fraudulent.

10. The non-transitory computer-readable medium of claim 6 , wherein the one or more instructions, that cause the one or more processors to perform the action, cause the one or more processors to:
after the first threshold time period, process a second set of the messages to identify whether the second set of the messages includes the confirmation message,
wherein the second set of the messages were received by the messaging account within a second threshold time period that expires after the first thres

Assignees

• Capital One Services Llc

Inventors

• Mossoba Michael
• Edwards Joshua
• Benkreira Abdelkadar M'Hamed

Classifications

• G06Q20/386

  using messaging services or messaging apps (using mobile network messaging services for payment, e.g. SMS G06Q20/3255) · CPC title

• G06Q30/06 Primary

  Buying, selling or leasing transactions · CPC title

• G06Q20/4016 Primary

  involving fraud or risk level assessment in transaction processing · CPC title

• G06Q20/382

  insuring higher security of transaction · CPC title

• G06Q20/047

  using payment protocols involving electronic receipts · CPC title