How I backtest a fraud rule before it ships
Four SQL checks for alert volume, known-fraud rate, overlap, and threshold selection before a rule reaches production.
Fixel Smith on practical SQL, fraud detection, and public-sector data analytics.
Four SQL checks for alert volume, known-fraud rate, overlap, and threshold selection before a rule reaches production.
Most fraud dashboards look better in a leadership deck than they work on an analyst's second monitor.
The standard fix doesn't work. Here's what does, with the SQL.
How to find connected fraud accounts using recursive CTEs and self-joins. Solves the graph-database problem without a graph database.
QUALIFY, frame specs, FILTER, gap-and-island, and the rest of the window-function patterns that turn five-line fraud rules into one-line filters.
The actual queries I run when I'm hunting fraud in transaction data. Velocity, impossible distances, suspicious amounts, merchant clusters, off-hours buys, and window functions.