B Configuring a User Defined Assessment

This Appendix explains about configuring a user defined function in IPE:

Example Scenario:

• Monitoring ATM Withdrawals

Focus

• Account (AC)
• Customer (CU)

Scenario Class

• Fraud (FR)

Scenario Objective

• An account which is transacting through ATM in different permutations and combinations requires monitoring to avoid fraudulent activities.

Alert Generation

• An alert would be generated when the filters of an evaluation are met. Profiles shall provide an output for some of the filters of an evaluation.

Table B-1 Alert Generation

Evaluations	Filters for an Evaluation	Profiles for an Evaluation
Frequent ATM Withdrawals	ATM withdrawals > =2 Amount withdrawal > 200 Time Period after deposit within 4 hours ATM Deposit > 500	Frequent Count of ATM Withdrawals Time Period after deposit
Frequent ATM withdrawals on a device	ATM withdrawals > = 10 Within = 10 minutes	Frequent count of withdrawals on a device
Frequent ATM withdrawals on a card – Velocity 1	ATM withdrawals >=3 Within = 10 minutes	Frequent count of withdrawals on a card
Frequent ATM withdrawals on a card – Velocity 2	ATM withdrawals >=5 Within = 15 minutes Amount Withdrawn > = 10000	Frequent count of withdrawals on a card
Suspicious ATM Withdrawals	ATM withdrawals > =3 Amount withdrawal >800 Time Period = 30 minutes Device = Different Card = Different	Suspicious Count of ATM withdrawals for different Device & Card Withdrawal Time Period
Suspicious ATM Withdrawals on a card	ATM withdrawals > =3 Amount withdrawal >800 Time Period = 30 minutes Device = Different Card = Same	Suspicious Count of ATM withdrawals for different Device & same Card Withdrawal Time Period
Suspicious ATM Withdrawals on a ATM machine	ATM withdrawals > =3 Amount withdrawal >800 Time Period = 30 minutes Device = Same Card = Different	Suspicious Count of ATM withdrawals for same Device & different Card Withdrawal Time Period
Suspicious ATM Withdrawals on a card and ATM device	ATM withdrawals > =3 Amount withdrawal >800 Time Period = 30 minutes Device = Same Card = Same	Suspicious Count of ATM withdrawals for same Device & Card Withdrawal Time Period
ATM Withdrawals in Unusual Time	Current Amount withdrawal > 300 Current Transaction Time between 5 to 7 pm Previous Transaction Time between 4 to 5pm Previous Amount withdrawn > 300	Amount withdrawn on a previous transaction in an unusual time
ATM withdrawals in High Risk period	Transaction Time : 12am to 5am	High Risk Period
Frequent ATM Transactions on a ATM Device	# of cards used > 10 Device = Same Within = 10 minutes	Count of Cards used at a ATM device Transaction Time
Maximum Amount ATM Withdrawals	# of Maximum Amount Withdrawn > 3 Within = 10 minutes Device = Same Maximum Amount > =	Count of maximum amount withdrawn Transaction Time Period for maximum amount withdrawn
Frequent Balance Enquiries	# of balance enquiries > = 5 Balance Enquiry within = 10 minutes Device = same	Count of Balance Enquiries at a device Balance Enquiry time
Suspicious ATM withdrawal – device specific	More than X maximum amount ATM withdrawals in Y minutes at same ATM device
Unusual ATM Location	The location of this ATM transaction is not one of the typical ATM locations for this card.

Filters

• For Account Focus
  • Include ATM Transactions only
  • Include Customer Retail Accounts only
• For Customer Focus
  • Include ATM Transactions only
  • Include Customer Retail Accounts only

Data Streams of Interest

• Account
• Customer
• Watch List
• Watch List Entry
• Transaction

Table B-2 Building Blocks

Parameters for
Parameter Name	Description	Sample Value (Min, Max)
Amount Deposited
Amount Withdrawn
Look back for withdrawal
# of withdrawals

Table B-3 Building Blocks

Building Block	Description	Possible Number of Records Retrieved to Describe Alert
		AC	CU
Cash Transaction
Account
Customer
Account Balance
Account Summary

Table B-4 Highlights

Highlights for
Display Name		Description

Frequency Period – Real Time

Look back Period – Tunable