Illustrative analysis: Transaction amount distribution & geographic usage patterns | Sample dataset (n=2,847 users)
The sample user exhibits stable spending behavior (₱8K–₱15K daily average) with a significant deviation on Feb 14. This spike coincides with a high-risk merchant category (electronics) and occurred outside typical transaction hours (2:17 AM local time).
Risk Assessment: Single anomaly may reflect legitimate large purchase; however, combined with geographic inconsistency (see Graph 2), cumulative risk score increases to 78/100. Recommend correlating with device fingerprint and IP geolocation data per BSP Circular 1112 transaction monitoring guidelines.
London → New York transaction sequence: 45-minute interval for 5,585 km distance. Physically impossible without air travel (min. 7.5 hrs). High-confidence account takeover indicator.
The user's historical pattern shows strong geographic consistency (87% Manila-based). The Feb 14 transactions from London and New York represent a severe deviation. The 45-minute interval between these locations violates physical travel constraints, indicating potential credential compromise or synthetic identity usage.
Integrated Risk Assessment: When combined with the amount anomaly (Graph 1), the composite behavioral risk score reaches 92/100 (Critical). Recommended actions per institutional policy: (1) Immediate transaction hold on high-value authorizations, (2) Step-up authentication challenge, (3) Case escalation to fraud investigation team within 15 minutes. All actions logged for AMLC reporting compliance.