Systems and Methods for Identifying Suspicious Orders

A computer-implemented method for identifying suspicious orders received for controlled substances, the method comprising the steps of:

• receiving an order for a controlled substance from a customer, the order comprising an order quantity, an order date, a customer identifier identifying the customer, a customer type identifier identifying a type of customer, and a substance identifier identifying the controlled substance;
• querying historical orders from memory comprising a historical substance identifier that matches the substance identifier, each historical order comprising a historical quantity, a ship date identifying the date the order was shipped, a historical customer identifier identifying a customer who placed the order, and a historical customer type identifier identifying the type of customer;
• applying checks to the order via a computer device, the checks comprising
• (1) the computer device determining whether the order quantity is greater than a first upper control limit value, the first upper control limit value being derived from the historical quantities for a first subset of the historical orders, the first subset of the historical orders comprising the historical orders with the historical customer identifiers that match the customer identifier, and in response to the order quantity being greater than the first upper control limit value, marking the order as suspicious;
• (2) the computer device calculating a period of time between the order date for the order and the ship date for a previous consecutive historical order from the historical orders with the historical customer identifier that matches the customer identifier, determining whether the order quantity is greater than a second upper control limit value, the second upper control limit value being derived from the period of time and the historical quantities for a second subset of the historical orders, the second subset of the historical orders comprising the historical orders with the historical customer identifiers that match the customer identifier, and in response to the order quantity being greater than the second upper control limit value, marking the order as suspicious;
• (3) the computer device determining whether the order quantity is greater than a first threshold value, the first threshold value being derived from the historical quantities for a third subset of the historical orders, the third subset of the historical orders comprising the historical orders with the historical customer type identifiers that match the customer type identifier, and in response to the order quantity being greater than the first threshold value, marking the order as suspicious;
• and
• (4) the computer device determining whether the order quantity is greater than a second threshold value, the second threshold value is derived from the historical quantities of the historical orders, and in response to the order quantity being greater than the second threshold value, marking the order as suspicious;
• and
• in response to the order being marked as suspicious, storing information associated with the order in the memory to facilitate further investigation.

A computer-readable medium comprising code executable by a processor to:

• receive an order for a controlled substance from a customer, the order comprising an order quantity, an order date, a customer identifier identifying the customer, a customer type identifier identifying a type of customer, and a substance identifier identifying the controlled substance;
• query historical orders comprising a historical substance identifier that matches the substance identifier, each historical order comprising a historical quantity, a ship date identifying the date the order was shipped, a historical customer identifier identifying a customer who placed the order, and a historical customer type identifier identifying the type of customer;
• apply checks to the order, the checks comprising
• (1) determining whether the order quantity is greater than a first upper control limit value, the first upper control limit value being derived from the historical quantities for a first subset of the historical orders, the first subset of the historical orders comprising the historical orders with the historical customer identifiers that match the customer identifier, and in response to the order quantity being greater than the first upper control limit value, marking the order as suspicious;
• (2) calculating a period of time between the order date for the order and the ship date for a previous consecutive historical order from the historical orders with the historical customer identifier that matches the customer identifier, determining whether the order quantity is greater than a second upper control limit value, the second upper control limit value being derived from the period of time and the historical quantities for a second subset of the historical orders, the second subset of the historical orders comprising the historical orders with the historical customer identifiers that match the customer identifier, and in response to the order quantity being greater than the second upper control limit value, marking the order as suspicious;
• (3) determining whether the order quantity is greater than a first threshold value, the first threshold value being derived from the historical quantities for a third subset of the historical orders, the third subset of the historical orders comprising the historical orders with the historical customer type identifiers that match the customer type identifier, and in response to the order quantity being greater than the first threshold value, marking the order as suspicious;
• and
• (4) determining whether the order quantity is greater than a second threshold value, the second threshold value is derived from the historical quantities of the historical orders, and in response to the order quantity being greater than the second threshold value, marking the order as suspicious;
• and
• in response to the order being marked as suspicious, store information associated with the order in the memory to facilitate further investigation.