RAIN / AI Fraud Detection

The payment can be authorized.The story can still be wrong.

Payment fraud is not a single class of event. The Federal Reserve’s voluntary FraudClassifier distinguishes who initiated a payment and how the event occurred; the FBI describes business-email compromise that exploits apparently familiar requests. A proposed RAIN study would evaluate specific review signals against those distinctions, rather than promising one universal fraud score.

Exploratory use case

INTELLIGENCE BELONGS WHERE THE DATA LIVES.

THE FRAUD RESEARCH / PAYMENT DECEPTION QUESTION

Is this payment change a legitimate event, an account compromise, or an authorized person being deceived?

Separate account compromise from authorized-payment deception and legitimate change, with explicit attention to false alerts and the timing of available evidence.

Sector context [1] [2]

A CASE WORTH RECONSTRUCTING

A familiar invoice, a changed destination.

In a fictional historical example, an accounts-payable employee receives a plausible supplier message asking for a change to the bank details used for a forthcoming payment.

Fraud research / payment deception / PILOT SCENARIO01 — REVIEW NOTES
THE CASE CONTEXT

Reconstruct the sequence.

A proposed review signal brings the changed recipient details and available request history together. The study compares this case with both confirmed deception and legitimate supplier changes; it does not assume that every change is fraudulent.

THE HUMAN DECISION

Keep the reviewer in charge.

The responsible team checks the request through its established verification process and determines what action is appropriate. The study neither blocks the payment nor contacts the supplier.

Illustrative research design informed by public fraud typologies. RAIN has no implemented fraud-detection product, demonstrated detection rate, or automatic payment intervention.

Fraud research / payment deception / PROPOSED WORKFLOW

From a record to a reviewed case.

  1. 01

    Choose one deception pattern

    Start with a bounded task such as supplier payment-change review, and include legitimate changes as well as resolved fraud cases.

  2. 02

    Review the outcome labels

    Distinguish confirmed outcomes from allegations and unresolved cases; record the evidence and review date behind each label.

  3. 03

    Freeze the observation point

    Reconstruct only the records that existed at the chosen decision time so later investigation findings cannot leak into the proposed signal.

  4. 04

    Test under a realistic queue limit

    Compare signals at an agreed review capacity and inspect false alerts, missed cases, and differences between fraud mechanisms.

  5. 05

    Review usefulness with specialists

    Assess whether the evidence helps the responsible team ask the right verification question, while leaving live payment controls unchanged.

THE INPUTS THAT MATTER

Follow the record.

Choose a source to see the context it adds to this proposed review.

SOURCE / 01

Payment and beneficiary changes

Approved records of the payment instruction and changes to recipient details, considered alongside legitimate business changes in the same sample.

SCOPED INPUT · HUMAN REVIEW
SOURCE / 02

Request provenance

Permitted metadata and correspondence showing where a payment-change request originated and what evidence of verification was available at the time.

SCOPED INPUT · HUMAN REVIEW
SOURCE / 03

Access and initiation context

The institution’s available record of who initiated the payment and relevant access events, without treating successful authentication as proof that the request was honest.

SCOPED INPUT · HUMAN REVIEW
SOURCE / 04

Reviewed outcomes

Confirmed case classifications, review dates, and unresolved outcomes; an uninvestigated event should not silently become a trustworthy negative example.

SCOPED INPUT · HUMAN REVIEW

WHAT A PILOT SHOULD PROVE

Define useful
before you measure it.

Suggested evaluation criteria. Set the baseline and acceptance thresholds with the sector team before a trial.

01Precision at a fixed review capacity
Within a pre-agreed number of cases reviewers can inspect, the share of surfaced cases confirmed relevant, reported separately by fraud mechanism.
02Legitimate-change false-alert rate
The share of reviewed legitimate recipient or instruction changes incorrectly escalated by the proposed signal, with uncertainty in outcome labels reported.
03Detection coverage on resolved cases
The share of known relevant cases surfaced when replayed using only evidence available at the selected review time; this does not estimate unknown fraud in the whole population.

THE OPERATING BOUNDARY

Be precise about the scope.

No automatic accusation or intervention

The proposed scope excludes blocking transfers, freezing accounts, assigning liability, or contacting customers. A signal is a prompt for human review, not a finding of fraud.

Do not train on the answer

Later chargebacks, complaints, and investigation notes can reveal an outcome that was unavailable earlier. Keep those labels separate from the inputs used in a historical replay.

Measure each mechanism separately

Account compromise and deception of an authorized person need different context. The FraudClassifier is a voluntary taxonomy, not a legal liability framework or an endorsement of RAIN.

RESEARCH & CONTEXT

The thinking behind
this use case.

Primary sources reviewed September 2026. These explain the sector context; the scenario and pilot measures are RAIN proposals, not reported customer results or source endorsements.

  1. 01

    Federal Reserve Banks / FedPayments Improvement

    FraudClassifier Model: Frequently Asked Questions

    The voluntary model classifies fraud by the initiating party and mechanism, distinguishing authorized-party events from unauthorized-party events without determining liability.

  2. 02

    Federal Bureau of Investigation

    Business Email Compromise

    The FBI describes deceptive requests that appear to come from known business contacts, including changed payment instructions, and the importance of independent verification.

03 / A FEW DETAILS

Worth understanding.

Can RAIN block suspected activity today?

No. The current implementation is a plant simulator. This exploratory concept does not include live account actions, payment blocking or automated enforcement.

Does an unusual pattern prove fraud?

No. An unusual pattern is a prompt for review. The proposed study would evaluate it against appropriate records and human investigation outcomes.

AI Fraud Detection / EXPLORE THE FIT

Bring the question.
Define the study.

Start with the records, the review team, and the evidence a useful outcome would need. RAIN’s current implementation is a battery-storage simulator; this sector workflow requires its own validation.

Prepare a ai fraud detection brief