Transaction Monitoring

Transaction monitoring is the continuous or periodic surveillance of payment transaction activity to detect patterns, anomalies, and behaviors that may indicate fraud, money laundering, account takeover, or other financial crime. It is distinct from point-of-transaction fraud scoring, which evaluates each individual transaction in real time at the moment of processing, in that transaction monitoring looks at patterns across transactions over time and across accounts.

In the AML (Anti-Money Laundering) context, transaction monitoring is a regulatory requirement for financial institutions and Money Services Businesses (MSBs). It involves establishing baseline behavioral profiles for each customer, then flagging deviations from those baselines that may indicate suspicious activity: sudden large transfers, unusual geographic patterns, structuring (breaking large amounts into smaller transactions to avoid reporting thresholds), rapid movement of funds through multiple accounts, or transaction patterns inconsistent with the customer's stated business purpose. Flagged transactions are reviewed by compliance staff, and confirmed suspicious activity is reported through Suspicious Activity Reports (SARs) to FinCEN or equivalent regulatory bodies.

In the payments fraud context, transaction monitoring provides a longer time horizon than real-time scoring. It can identify account takeover patterns that develop over days (a fraudster gradually testing increasing transaction amounts on a compromised account), Friendly Fraud patterns from specific customers across months, or emerging fraud attack patterns that real-time models have not yet adapted to. Transaction monitoring tools generate alerts that are reviewed by fraud operations teams and fed back into real-time Fraud Scoring models as training data.