Cross-Cluster Transaction Risk Assessment

A system comprising:

• at least one device including a hardware processor;
• the system being configured to perform operations comprising:
• obtaining customer transaction data comprising a plurality of transaction details;
• clustering the customer transaction data into clusters of transactions based on the transaction details;
• calculating a centroid for each cluster of transactions, the centroid representing a transaction corresponding to a mean value within the corresponding cluster;
• determining, for each transaction, a relationship score indicating the distance of the transaction from the centroid of its cluster;
• clustering transactions across multiple customers within a posting period to determine a centroid for each of the customers;
• calculating a risk score for each transaction by evaluating the transaction's relationship scores against the centroid of the corresponding cluster and the centroids of the other clusters;
• assigning a risk flag to transactions having risk scores exceeding one or more predefined risk thresholds;
• and
• presenting one or more notifications of the transactions with risk flags to one or more client devices associated with users.

A non-transitory computer-readable medium containing instructions comprising:

• obtaining customer transaction data comprising a plurality of transaction details;
• clustering the customer transaction data into clusters of transactions based on the transaction details;
• calculating a centroid for each cluster of transactions, the centroid representing a transaction corresponding to a mean value within the corresponding cluster;
• determining, for each transaction, a relationship score indicating the distance of the transaction from the centroid of its cluster;
• clustering transactions across multiple customers within a posting period to determine a centroid for each of the customers;
• calculating a risk score for each transaction by evaluating the transaction's relationship scores against the centroid of the corresponding cluster and the centroids of the other clusters;
• assigning a risk flag to transactions having risk scores exceeding one or more predefined risk thresholds;
• and
• presenting one or more notifications of the transactions with risk flags to one or more client devices associated with users.