DETECTING DIGITAL HARVESTING UTILIZING A DYNAMIC TRANSACTION REQUEST FRAUD DETECTION MODEL
The disclosure describes embodiments of systems, methods, and non-transitory computer readable storage media that utilize a transaction request fraud detection model with a harvesting threshold to detect account number harvesting from network transaction requests. For example, the disclosed systems can identify network transaction requests from a transaction facilitator computing device and transaction request response codes for the network transaction requests. Subsequently, utilizing a transaction request fraud detection model, the disclosed systems can determine that the number of network transaction requests that include declined transaction request response codes satisfies a harvesting threshold indicating an account number harvesting event. In response to the indicated account number harvesting, the disclosed systems can send a selected transaction request response for responses to additional declined network transaction requests instead of one or more original transaction request response codes.
1 . A computer-implemented method comprising:
identifying, for a time period, a set of network transaction requests comprising account numbers and transaction request response codes in response to the set of network transaction requests;
determining, utilizing a transaction request fraud detection model, that a subset of network transaction requests from the set of network transaction requests comprise one or more declined transaction request response codes and satisfy a harvesting threshold indicating an account number harvesting; and
based on the subset of network transaction requests satisfying the harvesting threshold indicating the account number harvesting, sending a selected transaction request response for responses to additional declined network transaction requests instead of one or more original transaction request response codes for the additional declined network transaction requests.
2 . The computer-implemented method of claim 1 , further comprising sending the selected transaction request response code to a recipient computing device of a transaction facilitator to transmit as a response to the additional declined network transactions requests instead of the one or more original transaction request response codes.
3 . The computer-implemented method of claim 1 , wherein the one or more original transaction request response codes indicate an original transaction request response to the additional declined network transaction requests.
4 . The computer-implemented method of claim 1 , wherein the transaction request response codes comprise codes for an incorrect information decline response, a fraud alert decline response, or a user reported decline response.
5 . The computer-implemented method of claim 4 , wherein:
the incorrect information decline response comprises a response indicating an incorrect security pin corresponding to the account number, a response indicating an incorrect expiration date corresponding to the account number, a response indicating the account number as an incorrect account number, or a response indicating an incorrect address corresponding to the account number;
the fraud alert decline response comprises a response indicating fraudulent activity corresponding to the account number or a response indicating an irregular transaction; and
the user reported decline response comprises a response indicating a user reported lost card corresponding to the account number or a response indicating a user reported theft of the account number.
6 . The computer-implemented method of claim 1 , further comprising utilizing a percentage threshold indicating a percentage of declined network transaction requests as the harvesting threshold.
7 . The computer-implemented method of claim 1 , further comprising determining, utilizing the transaction request fraud detection model, the harvesting threshold based on historical data of a transaction facilitator corresponding to the set of network transaction requests.
8 . The computer-implemented method of claim 1 , further comprising identifying, utilizing the transaction request fraud detection model, an indication of the account number harvesting by comparing a number of declined transaction request response codes from the subset of network transaction requests to the harvesting threshold.
9 . The computer-implemented method of claim 1 , further comprising identifying, utilizing the transaction request fraud detection model, matching numbers at designated positions within the account numbers as an indication of the account number harvesting.
10 . The computer-implemented method of claim 1 , further comprising tagging, based on the subset of network transaction requests satisfying the harvesting threshold indicating the account number harvesting, one or more account numbers corresponding to the subset of network transaction requests for tracking additional network transaction requests for the one or more account numbers.
11 . A non-transitory computer-readable medium storing instructions that, when executed by at least one processor, cause a computing device to:
identify, for a time period, a set of network transaction requests comprising account numbers and transaction request response codes in response to the set of network transaction requests;
determine, utilizing a transaction request fraud detection model, that a subset of network transaction requests from the set of network transaction requests comprise one or more declined transaction request response codes and satisfy a harvesting threshold indicating an account number harvesting; and
based on the subset of network transaction requests satisfying the harvesting threshold indicating the account number harvesting, send a selected transaction request response for responses to additional declined network transaction requests instead of one or more original transaction request response codes for the additional declined network transaction requests.
12 . The non-transitory computer-readable medium of claim 11 , further comprising instructions that, when executed by the at least one processor, cause the computing device to, based on the subset of network transaction requests satisfying the harvesting threshold indicating the account number harvesting, refrain from transmitting electronic communication alerts to client devices corresponding to one or more account numbers from the account numbers of the subset of network transaction requests.
13 . The non-transitory computer-readable medium of claim 11 , further comprising instructions that, when executed by the at least one processor, cause the computing device to, based on the subset of network transaction requests satisfying the harvesting threshold indicating the account number harvesting, transmit an electronic communication for the indicated account number harvesting to a recipient computing device of a transaction facilitator corresponding to the set of network transaction requests.
14 . The non-transitory computer-readable medium of claim 11 , further comprising instructions that, when executed by the at least one processor, cause the computing device to, based on the subset of network transaction requests satisfying the harvesting threshold indicating the account number harvesting, block a transaction facilitator corresponding to the set of network transaction requests from subsequent network transaction requests.
15 . The non-transitory computer-readable medium of claim 11 , further comprising instructions that, when executed by the at least one processor, cause the computing device to not send selected transaction request responses instead of original transaction request responses to a transaction facilitator identified within a database of excluded transaction facilitators.
16 . A system comprising:
at least one processor; and
at least one non-transitory computer-readable storage medium storing instructions that, when executed by the at least one processor, cause the system to:
identify, for a time period, a set of network transaction requests comprising account numbers and transaction request response codes in response to the set of network transaction requests;
determine, utilizing a transaction request fraud detection model, that a subset of network transaction requests from the set of network transaction requests comprise one or more declined transaction request response codes and satisfy a harvesting threshold indicating an account number harvesting; and
based on the subset of network transaction requests satisfying the harvesting threshold indicating the account number harvesting, send a selected transaction request response for responses to additional declined network transaction requests instead of one or more original transaction request response codes for the additional declined network transaction requests.
17 . The system of claim 16 , further comprising instructions that, when executed by the at least one processor, cause the system to send the selected transaction request response code to a recipient computing device of a transaction facilitator to transmit as a response to the additional declined digital network transactions requests instead of the one or more original transaction request response codes.
18 . The system of claim 16 , further comprising instructions that, when executed by the at least one processor, cause the system to identify, utilizing the transaction request fraud detection model, an indication of the account number harvesting by comparing a number of declined transaction request response codes from the subset of network transaction requests to the harvesting threshold.
19 . The system of claim 16 , further comprising instructions that, when executed by the at least one processor, cause the system to utilize a percentage threshold indicating a percentage of declined network transaction requests as the harvesting threshold.
20 . The system of claim 16 , further comprising instructions that, when executed by the at least one processor, cause the system to determine, utilizing the transaction request fraud detection model, the harvesting threshold based on characteristics of a transaction facilitator corresponding to the set of network transaction requests.