Systems and methods for identifying fraudulent common point of purchases

A common point of purchase (CPP) computing device comprising a processor communicatively coupled to a memory, the CPP computing device configured to:

• receive transaction data stored by a payment processor from a first plurality of transactions processed by the payment processor, the first plurality of transactions initiated by a first plurality of users at a plurality of merchants, the transaction data including, for each of the transactions, a unique merchant ID, a time stamp, and an account ID, wherein the time stamps for each of the first plurality of transactions fall within a first time period;
• build, in a database, a merchant table including a plurality of records, each record pairing one of the unique merchant IDs and a corresponding one of the account IDs, the corresponding one of the account IDs associated with the unique merchant ID in at least one of the transactions over the first time period, comprising including each pairing in no more than one of the records;
• receive a list of flagged account IDs from a third party;
• retrieve, from the merchant table, the unique merchant ID from every record that includes one of the flagged account IDs;
• parse the merchant table to determine (i) a respective total number of account IDs associated with each retrieved unique merchant ID and (ii) a respective total number of flagged account IDs associated with each retrieved unique merchant ID;
• compute a metric for each retrieved unique merchant ID based on a number of flagged account IDs in the list, the total number of account IDs associated with the retrieved unique merchant identifier, the total number of flagged account IDs associated with the retrieved unique merchant identifier, and a total number of unique account IDs in the merchant table;
• and
• cause a client system to display a report identifying a subset of the unique merchant IDs as compromised merchant locations based on the metric.

A computer-implemented method for identifying a common point of purchases involved in fraudulent or unauthorized payment transactions, said method implemented using a common point of purchase (CPP) computing device in communication with a memory, said method comprising steps executed by the processor of:

• receiving transaction data stored by a payment processor from a first plurality of transactions processed by the payment processor, the first plurality of transactions initiated by a first plurality of users at a plurality of merchants, the transaction data including, for each of the transactions, a unique merchant ID, a time stamp, and an account ID, wherein the time stamps for each of the first plurality of transactions fall within a first time period;
• building, in a database, a merchant table including a plurality of records, each record pairing one of the unique merchant IDs and a corresponding one of the account IDs, the corresponding one of the account IDs associated with the unique merchant ID in at least one of the transactions over the first time period, comprising including each pairing in no more than one of the records;
• receiving a list of flagged account IDs from a third party;
• retrieving, from the merchant table, the unique merchant ID from every record that includes one of the flagged account IDs;
• parsing the merchant table to determine (i) a respective total number of account IDs associated with each retrieved unique merchant ID and (ii) a respective total number of flagged account IDs associated with each retrieved unique merchant ID;
• computing a metric for each retrieved unique merchant ID based on a number of flagged account IDs in the list, the total number of account IDs associated with the retrieved unique merchant identifier, the total number of flagged account IDs associated with the retrieved unique merchant identifier, and a total number of unique account IDs in the merchant table;
• and
• causing a client system to display a report identifying a subset of the unique merchant IDs as compromised merchant locations based on the metric.

A non-transitory computer-readable storage media having computer-executable instructions embodied thereon, wherein when executed by a common point of purchase (CPP) computing device having at least one processor coupled to at least one memory device, the computer-executable instructions cause the at least one processor to:

• receive transaction data stored by a payment processor from a first plurality of transactions processed by the payment processor, the first plurality of transactions initiated by a first plurality of users at a plurality of merchants, the transaction data including, for each of the transactions, a unique merchant ID, a time stamp, and an account ID, wherein the time stamps for each of the first plurality of transactions fall within a first time period;
• build, in a database, a merchant table including a plurality of records, each record pairing one of the unique merchant IDs and a corresponding one of the account IDs, the corresponding one of the account IDs associated with the unique merchant ID in at least one of the transactions over the first time period, comprising including each pairing in no more than one of the records;
• receive a list of flagged account IDs from a third party;
• retrieve, from the merchant table, the unique merchant ID from every record that includes one of the flagged account IDs;
• parse the merchant table to determine (i) a respective total number of account IDs associated with each retrieved unique merchant ID and (ii) a respective total number of flagged account IDs associated with each retrieved unique merchant ID;
• compute a metric for each retrieved unique merchant ID based on a number of flagged account IDs in the list, the total number of account IDs associated with the retrieved unique merchant identifier, the total number of flagged account IDs associated with the retrieved unique merchant identifier, and a total number of unique account IDs in the merchant table;
• and
• cause a client system to display a report identifying a subset of the unique merchant IDs as compromised merchant locations based on the metric.