Automated fraud detection for point-of-sale devices

摘要

Techniques and arrangements for detecting potentially fraudulent transactions made on a point-of-sale (POS) device. In some instances, the POS device may upload a batch of authorization requests corresponding to transactions made on the POS device while the POS device was in an offline mode. A payment service may receive this batch and, as opposed to processing the entire batch, may select a subset for processing. After selecting the subset, the payment service may attempt to authorize payment instruments associated with each transaction of the subset. The payment service may then compare an amount of declined payment instruments to a threshold. If the amount is greater than the threshold, then the payment service may flag the subset and/or the batch as fraudulent and may refrain from processing further transactions of the batch.

主权项

1. An automated fraud-detection system configured to designate a group of transactions as potentially fraudulent without analyzing each individual transaction of the group of transactions, the automated fraud-detection system comprising:
a mobile point-of-sale (POS) device, the mobile POS device comprising:
a card reader;a processor; anda computer-readable media storing first instructions executable by the processor, wherein the first instructions program the processor to:
store, while the mobile POS device is in an offline mode with respect to a remote transaction processing service, data associated with the group of transactions, wherein each respective transaction of the group of transactions is associated with: (i) payment information read by the card reader from a payment instrument, and (ii) a cost of the respective transaction;transition from the offline mode to an online mode with respect to the remote transaction processing service;based on least in part on transitioning to the online mode, send, to the remote transaction processing service, an indication of the group of transactions;send, to the remote transaction processing service, a request to process the group of transactions; andreceive, from the remote transaction processing service, an indication of which payment instruments associated with a subset of transactions from the group of transactions were authorized and which of the payment instruments associated with the subset were declined; and the remote transaction processing system, the remote transaction processing system comprising:
one or more processors; andone or more computer-readable media storing second instructions executable by the one or more processors, wherein the second instructions program the one or more processors to:
receive, from the mobile POS device, the indication of the group of transactions;receive the request from the mobile POS device to process the group of transactions;select, from the group of transactions, the subset to process, the subset being less than the group of the transactions;attempt to authorize, by communicating with one or more computing devices associated with one or more card payment networks and for each respective transaction of the subset, the payment instrument for the cost of the respective transaction of the subset;send, to the mobile POS device, the indication of which of the payment instruments associated with the subset were authorized and which of the payment instruments associated with the subset were declined;determine a decline metric based at least in part on a number of the payment instruments associated with the subset that were declined;compare the decline metric to a decline threshold;at least partly in response to determining that the decline metric is less than the decline threshold, select, from the group of transactions, another subset of transactions to process; andat least partly in response to determining that the decline metric is greater than the decline threshold:
refrain from processing additional transactions of the group of transactions;designate the group of transactions as potentially fraudulent without having processed each transaction of the group of transactions; andflag at least the transactions of the subset of the group of transactions for subsequent automated fraud analysis.