US 12,323,455 B1
Systems and methods for detecting fraudulent requests on client accounts
Arthur Quentin Smith, Fredericksburg, TX (US); Kevin K. Fiedler, Fair Oaks Ranch, TX (US); and Andrew Jerome Gabriel Higgins, San Antonio, TX (US)
Assigned to United Services Automobile Association (USAA), San Antonio, TX (US)
Filed by United Services Automobile Association (USAA), San Antonio, TX (US)
Filed on Jul. 17, 2023, as Appl. No. 18/222,723.
Application 18/222,723 is a continuation of application No. 17/324,957, filed on May 19, 2021, granted, now 11,704,728.
Application 17/324,957 is a continuation of application No. 16/164,508, filed on Oct. 18, 2018, granted, now 11,019,090, issued on May 25, 2021.
Claims priority of provisional application 62/632,672, filed on Feb. 20, 2018.
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 9/40 (2022.01); G06F 21/40 (2013.01); G06Q 40/02 (2023.01); G06Q 50/26 (2012.01); G06Q 30/016 (2023.01)
CPC H04L 63/1433 (2013.01) [G06F 21/40 (2013.01); G06Q 40/02 (2013.01); G06Q 50/265 (2013.01); H04L 63/1483 (2013.01); G06Q 30/016 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A non-transitory computer-readable medium comprising computer-executable instructions, when executed, are configured to cause at least one processor to:
receive a notification indicative of suspicious activity occurring in a communication that is currently being conducted between a representative associated with an organization and an individual contacting the organization concerning an account;
analyze the communication currently being conducted with respect to expected web traffic data associated with the individual;
determine whether the communication is associated with a fraud method based on the analysis;
determine a lifecycle stage of the fraud method being used to access the account based on mobile application hit data associated with an additional individual authorized to access the account, email traffic data associated with the additional individual, a password reset being performed for the additional individual, a number of questions asked during the communication, or a combination thereof, wherein a stage in the lifecycle stage comprises no attack in progress, an attack has been initiated, the attack is advancing, the attack being nearly complete, the account is taken over, or the account is damaged; and
send an alert indicative of the fraud method and the lifecycle stage of the fraud method to a computing device associated with the additional individual authorized to access the account.