Detecting fraud based on gratuity amounts

A method comprising:

• detecting, via a processing system, trigger data indicative of a transaction expected to occur within a time period, wherein the transaction is associated with a user, wherein the trigger data corresponds to an indication that a vehicle system of a vehicle is activated, one or more search terms are entered into a navigation system of the vehicle, the vehicle is located within a proximity to a location, or any combination thereof;
• receiving, via the processing system, a gratuity model associated with the user in response to detecting the trigger data, wherein the gratuity model is representative of a plurality of expected gratuity amounts corresponding to a plurality of transaction types, and wherein the gratuity model is generated based on:
• one or more first correlations between one or more amounts of time that the user is positioned in one or more first locations and one or more gratuity amounts, wherein the one or more amounts of time are determined based on a first set of location data received from one or more location sensors associated with a mobile device corresponding to the user;
• and
• one or more second correlations between one or more second locations of the mobile device and one or more values of one or more properties corresponding to the one or more second locations, wherein the one or more second locations are determined based on a second set of location data received from the one or more location sensors;
• receiving, via the processing system, transaction data associated with the transaction;
• determining, via the processing system:
• an actual gratuity amount based on the transaction data;
• and
• an expected gratuity amount based on the gratuity model, an amount of time that the user was located at a location corresponding to the transaction data, and the location, wherein the amount of time and the location are determined based on a third set of location data acquired by the one or more location sensors;
• and
• generating, via the processing system, an alert indicative of unexpected financial activity in response to the actual gratuity amount deviating from the expected gratuity amount by a threshold amount, wherein the alert is presented via an electronic display;
• sending, via the processing system, a command to a financial system associated with the transaction to abort the transaction in response to receiving the actual gratuity amount deviating from the expected gratuity amount by the threshold amount;
• and
• updating, via the processing system, the gratuity model based on data associated with the transaction in response to the actual gratuity amount not deviating from the expected gratuity amount by the threshold amount.

One or more tangible, non-transitory, computer readable media containing instructions that, when executed by a processing system, cause the processing system to:

• detect trigger data indicative of a transaction expected to occur within a time period, wherein the transaction is associated with a user, wherein the trigger data corresponds to an indication that a vehicle system of a vehicle is activated, one or more search terms are entered into a navigation system of the vehicle, the vehicle is located within a proximity to a location, or any combination thereof;
• receive a gratuity model associated with the user in response to detecting the trigger data, wherein the gratuity model is representative of a plurality of expected gratuity amounts corresponding to a plurality of transaction types, and wherein the gratuity model is generated based on:
• one or more first correlations between one or more amounts of time that the user is positioned in one or more first locations and one or more gratuity amounts, wherein the one or more amounts of time are determined based on a first set of location data received from one or more location sensors associated with a mobile device corresponding to the user;
• and
• one or more second correlations between one or more second locations of the mobile device and one or more values of one or more properties corresponding to the one or more second locations, wherein the one or more second locations are determined based on a second set of location data received from the one or more location sensors;
• receive transaction data associated with the transaction;
• determine an actual gratuity amount based on the transaction data and an expected gratuity amount based on the gratuity model, an amount of time that the user was located at a location corresponding to the transactions data, and the location, wherein the amount of time and the location are determined based on a third set of location data acquired by the one or more location sensors;
• and
• generate an alert indicative of unexpected financial activity in response to the actual gratuity amount deviating from the expected gratuity amount by a threshold amount, wherein the alert is presented via an electronic display;
• send a command to a financial system associated with the transaction to abort the transaction in response to receiving the actual gratuity amount deviating from the expected gratuity amount by the threshold amount;
• and
• update the gratuity model based on data associated with the transaction in response to the actual gratuity amount not deviating from the expected gratuity amount by the threshold amount.