Papers for
financial fraud prevention teams
Papers whose findings have a practical use for this group, as judged from the abstract. Open a paper to read what it means in practice.
FST Pay ensures safe teen payments with strict real-time checks
FST Pay: Deterministic Safety-Gated Architecture for Youth Digital Payments
Abstract: Digital payment infrastructures increasingly provide adolescent users with direct access to real-time financial services. While early access promotes financial literacy and digital inclusion, it exposes young users to severe risks of impulsive spending, social engineering frauds, unauthorized transactions, and merchant exploitation. Conventional countermeasures rely on probabilistic machine learning or rigid static controls. However, allowing probabilistic or generative artificial intelligence (AI) models to directly influence real-time payment authorization introduces non-determinism, unpredictable edge-case behavior, and critical audit vulnerabilities. This paper introduces Financial Safety for Teens Pay (FST Pay) as an architectural and formal specification. FST Pay is founded on an immutable operational boundary: strict deterministic safety gating on the real-time authorization path coupled with decoupled downstream AI explanation. Transactions initiated via rails like UPI are subjected to six deterministic invariant checks covering spending limits, guardian co-sign policies, transaction amount thresholds, merchant category codes, temporal access intervals, and hardware integrity constraints. Transactions are classified strictly into ALLOW, REVIEW, or BLOCK outcomes through an ordered, mutually exclusive decision function. High-risk transactions trigger an asynchronous guardian co-sign workflow. Generative AI is relegated entirely downstream of settlement, consuming published post-decision events solely to generate natural-language financial insights without holding mutation privileges over the ledger.
Voice phishing calls forecasted for specific harm trajectories early
Vishing-Tactics-Bench: Forecasting Exploitation Trajectories in Voice Phishing Calls
Abstract: Voice phishing (vishing) unfolds in real time; by the time a call has ended and post-hoc classification is possible, the harm has already been done. The more actionable question is which concrete harm (Information Gathering or Financial Exploitation) an ongoing call is tactically progressing toward. We present Vishing-Tactics-Bench, a benchmark grounded in Endsley's situation-awareness (SA) framework that recasts vishing defense from after-the-fact fraud classification to harm projection: predicting at each turn whether the call will reach either terminal harm. We adapt MITRE ATT&CK to vishing as a 6-tactic taxonomy (Vishing-Tactics) and label 35,340 scammer utterances across 5,645 synthetic Chinese calls. We define Exploitation Trajectory Forecasting, a survival-style protocol over the two terminal harms with three metrics: AP@k, C-index, and divergence error. Baselines ranging from a Markov heuristic to fine-tuned LLMs show that the tactical trajectory serves as an interpretable representation of the call's tactical state, supporting harm-specific forecasting, which can then be used for the downstream application of intervention selection; a stratified lead-time analysis at a tight false-alarm budget further identifies at what point in a call the trajectory signal yields early warning.