Event processing for detection of suspicious financial activity

A computer program product comprising computer-readable program code embodied on a non-transitory computer-readable storage medium, the computer-readable program code executable by a computer system to implement a method of processing financial events, the method comprising:

• detecting a plurality of financial events by receiving data associated with the financial events from a plurality of detection channels, wherein the detection channels include an anti-money laundering system, a financial institution security system and a financial institution accounts system;
• formatting the data for each of the financial events into an event interface record;
• enriching the data corresponding to the plurality of financial events, wherein enriching comprises locating, in at least one database, data elements that are determined to be missing in the event interface record based on key identifiers and adding the data elements to the event interface record;
• scoring each of the financial events in each of the financial event groups based on pre-defined risk factors and customer experience data, wherein customer experience data includes transaction history related to one or more customers associated with the financial event, prior suspicious activity report (SAR) history associated with the one or more customers and prior cases investigated associated with the one or more customers;
• summing the scores of each of the financial events with a financial event group to result in a financial event group score;
• and
• comparing the financial event group score to a pre-defined threshold and as a result of the comparing:
• establishing a case for investigation corresponding to the financial event group, when the financial event group score meets or is above the pre-defined threshold, and
• statistically sampling the financial events when the financial event group score for the financial event group is below the pre-defined threshold, wherein statistically sampling further comprises:
• stratifying the financial events within the financial event groups having financial event group scores below the pre-defined threshold into a plurality of subgroups;
• and
• selecting a financial event from each of the plurality of subgroups as a statistically sampled financial event;
• and
• applying the statistically sampled financial events as at least a portion of the customer experience data for subsequent scoring processes.

A system for processing financial events comprising:

• a computing device including a memory and a processor in communication with the memory;
• a financial events module stored in the memory, executable by the processor and configured to:
• detect financial events by receiving data associated with the financial events from a plurality of detection channels, wherein the detection channels include an anti-money laundering system, a financial institution security system and a financial institution accounts system,
• format the data for each of the financial events into an event interface record,
• enrich the data corresponding to the plurality of financial events, wherein enriching comprises locating, in at least one database, data elements that are determined to be missing in the event interface record based on key identifiers and adding the data elements to the event interface record,
• score each of the financial events in each of the financial event groups based on pre-defined risk factors and customer experience data, wherein customer experience data includes transaction history related to one or more customers associated with the financial event, prior suspicious activity report (SAR) history associated with the one or more customers and prior cases investigated associated with the one or more customers,
• sum the scores of each of the financial events with a financial event group to result in a financial event group score;
• and
• compare the financial event group score to a pre-defined threshold and as a result of the comparing:
• establish a case for investigation corresponding to the financial event group when a corresponding financial event group score meets or is above a pre-defined threshold, and
• statistically sampling the financial events when the financial event group score for the financial event group is below the pre-defined threshold, wherein statistically sampling further comprises:
• stratifying the financial events within the financial event groups having financial event group scores below the pre-defined threshold into a plurality of subgroups,
• selecting a financial event from each of the plurality of subgroups as a statistically sampled financial event, and
• applying the statistically sampled financial events as at least a portion of the customer experience data for subsequent scoring processes;
• a first database comprising financial event data connected to the instruction execution platform;
• a second database comprising case data connected to the instruction execution platform;
• and
• a third database comprising a datamart connected to the instruction execution platform, wherein the datamart stores the risk factors, the pre-defined threshold, and the customer experience data to enable to instruction execution platform to use the financial event data and the case data.