Institute of Cyber Science and Technology, Shanghai Jiao Tong University, Shanghai 200240, China.
Department of Risk Control, China UnionPay, No. 998 Jinxiu Road, CUP Tower, Shanghai 200135, China.
Sensors (Basel). 2021 Nov 12;21(22):7507. doi: 10.3390/s21227507.
With the rise of online/mobile transactions, the cost of cash-out has decreased and the cost of detection has increased. In the world of online/mobile payment in IoT, merchants and credit cards can be applied and approved online and used in the form of a QR code but not a physical card or Point of Sale equipment, making it easy for these systems to be controlled by a group of fraudsters. In mainland China, where the credit card transaction fee is, on average, lower than a retail loan rate, the credit card cash-out option is attractive for people for an investment or business operation, which, after investigation, can be considered unlawful if over a certain amount is used. Because cash-out will incur fees for the merchants, while bringing money to the credit cards' owners, it is difficult to confirm, as nobody will declare or admit it. Furthermore, it is more difficult to detect cash-out groups than individuals, because cash-out groups are more hidden, which leads to bigger transaction amounts. We propose a new method for the detection of cash-out groups. First, the seed cards are mined and the seed cards' diffusion is then performed through the local graph clustering algorithm (Approximate PageRank, APR). Second, a merchant association network in IoT is constructed based on the suspicious cards, using the graph embedding algorithm (Node2Vec). Third, we use the clustering algorithm (DBSCAN) to cluster the nodes in the Euclidean space, which divides the merchants into groups. Finally, we design a method to classify the severity of the groups to facilitate the following risk investigation. The proposed method covers 145 merchants from 195 known risky merchants in groups that acquire cash-out from four banks, which shows that this method can identify most (74.4%) cash-out groups. In addition, the proposed method identifies a further 178 cash-out merchants in the group within the same four acquirers, resulting in a total of 30,586 merchants. The results and framework are already adopted and absorbed into the design for a cash-out group detection system in IoT by the Chinese payment processor.
随着线上/移动交易的兴起,提现成本降低,检测成本增加。在物联网的线上/移动支付世界中,商家和信用卡可以在线申请和批准,并以二维码的形式使用,而不是使用实体卡或销售点设备,这使得这些系统很容易被一群欺诈者控制。在中国内地,信用卡交易费用平均低于零售贷款利率,因此信用卡提现选项对人们来说具有吸引力,可用于投资或企业运营,但如果使用金额超过一定数额,则可能被视为非法。由于提现将给商家带来费用,同时也给信用卡所有者带来资金,因此很难确认,因为没有人会宣布或承认。此外,与个人相比,检测提现团伙更具挑战性,因为提现团伙更加隐蔽,导致交易金额更大。我们提出了一种新的提现团伙检测方法。首先,挖掘种子卡,并通过局部图聚类算法(近似 PageRank,APR)传播种子卡。其次,基于可疑卡构建物联网中的商家关联网络,使用图嵌入算法(Node2Vec)。然后,我们使用聚类算法(DBSCAN)在欧几里得空间中对节点进行聚类,将商家分为不同的群组。最后,我们设计了一种方法对群组的严重程度进行分类,以便于后续的风险调查。该方法涵盖了四家银行的 195 家已知风险商家中的 145 家商家,表明该方法可以识别出大部分(74.4%)提现团伙。此外,该方法还在同一四家收单机构中识别出 178 家提现商家,总计 30586 家商家。该方法和框架已经被中国支付处理商吸收并应用于物联网提现团伙检测系统的设计中。