Creating rules with history criteria

To create rulesClosed Rules are used to define sets of criteria to verify if an event (transaction and non-monetary event) matches any fraudulent behavior. If an event matches a previously defined rule, an alert can be raised. with history criteria, the relevant aggregation factors such as volume or velocity criteria are added.

History criteria parameters lists the parameters associated with history criteria.

History criteria parameters
Parameter Description
Aggregate by By default the historical events are filtered by their relationship (customer). You can reduce the number of historical events by filtering the application of the relationship or the account of the relationship.
Value to sum If the rule checks the sum of a value of a specific field of the historical event. This parameter contains the field name (e.g. the amount of the transactions in the historical data set).
Sum Threshold This is the arithmetic comparison of the sum result.
Frequency Threshold

This is the arithmetic comparison with the number of historical events that matched the criteria.

Possible values:

  • None: Apply Frequency Threshold for all historical events.
  • Different: Apply Frequency Threshold for event with distinct values of the field selected in the list box.
  • Same: Apply Frequency Threshold for event with same value of the field selected in the list box.
Period

The period during which the historical criteria applies.

Possible values:

  • Days
  • Hour
  • Mins

The history rules work with a temporary set of historical data that are filtered by these criteria and selected for a certain period.

To create history criteria

  1. After having created a basic rule as described in Creating basic rules, proceed to Create History Criteria next step in the Create Rule and Action WizardClosed This wizard takes you through the rule creation process - here you create rules, and define critera, actions, and response/status..

  2. Click Add to select and add the required history criteria such as the analysis level from the Aggregate By list menu, volume from the Sum Threshold list menu, and velocity from the Frequency Threshold list menu. Remove any criteria or clear criteria values if required by clicking the corresponding buttons.

  3. If the rule is to be a difference or same rule, selecting the corresponding option button and select the required criteria from the available list menu.

  4. Define the period over which the rule is to analyze pending alerts by entering the relevant values in the Days, Hours, and/or Mins input fields. To verify your entries, check the summary section in the wizard.

  5. When all criteria are defined, click Save & Next to complete this procedure.

  6. If the setup for this rule is complete and the rule is to be operative, toggle the rule to set it to Active by clicking Toggle Rule.

Next steps

You can also add history criteria to existing rules by clicking History Data in the relevant rule.

Proceed in the Create Rule and Action Wizard to add further rule parameters: