US 12,380,455 B2
Method, device, and system of detecting mule accounts and accounts used for money laundering
Itai Novick, Rehovot (IL); and Avi Turgeman, New York, NY (US)
Assigned to BIOCATCH LTD., Tel Aviv (IL)
Filed by BIOCATCH LTD., Tel Aviv (IL)
Filed on Jul. 4, 2023, as Appl. No. 18/218,026.
Application 18/218,026 is a continuation of application No. 18/099,945, filed on Jan. 22, 2023, granted, now 11,741,476.
Application 18/099,945 is a continuation of application No. 17/549,931, filed on Dec. 14, 2021, granted, now 11,580,553, issued on Feb. 14, 2023.
Application 17/549,931 is a continuation in part of application No. 16/872,381, filed on May 12, 2020, granted, now 11,210,674, issued on Dec. 28, 2021.
Application 16/872,381 is a continuation of application No. 16/242,015, filed on Jan. 8, 2019, granted, now 10,685,355, issued on Jun. 16, 2020.
Application 16/872,381 is a continuation of application No. 16/057,825, filed on Aug. 8, 2018, granted, now 10,523,680, issued on Dec. 31, 2019.
Application 16/242,015 is a continuation of application No. 15/203,817, filed on Jul. 7, 2016, granted, now 10,069,837, issued on Sep. 4, 2018.
Application 16/242,015 is a continuation in part of application No. 15/885,819, filed on Feb. 1, 2018, granted, now 10,834,590, issued on Nov. 10, 2020.
Application 15/885,819 is a continuation in part of application No. 14/675,764, filed on Apr. 1, 2015, abandoned.
Application 14/675,764 is a continuation in part of application No. 14/566,723, filed on Dec. 11, 2014, granted, now 9,071,969, issued on Jun. 30, 2015.
Application 14/566,723 is a continuation in part of application No. 13/922,271, filed on Jun. 20, 2013, granted, now 8,938,787, issued on Jan. 20, 2015.
Application 13/922,271 is a continuation in part of application No. 13/877,676, granted, now 9,069,942, issued on Jun. 30, 2015, previously published as PCT/IL2011/000907, filed on Nov. 29, 2011.
Application 14/675,764 is a continuation in part of application No. 14/320,653, filed on Jul. 1, 2014, granted, now 9,275,337, issued on Mar. 1, 2016.
Application 14/675,764 is a continuation in part of application No. 14/320,656, filed on Jul. 1, 2014, granted, now 9,665,703, issued on May 30, 2017.
Application 14/675,764 is a continuation in part of application No. 14/325,393, filed on Jul. 8, 2014, granted, now 9,531,733, issued on Dec. 27, 2016.
Application 14/675,764 is a continuation in part of application No. 14/325,394, filed on Jul. 8, 2014, granted, now 9,547,766, issued on Jan. 17, 2017.
Application 14/675,764 is a continuation in part of application No. 14/325,395, filed on Jul. 8, 2014, granted, now 9,621,567, issued on Apr. 11, 2017.
Application 14/675,764 is a continuation in part of application No. 14/325,396, filed on Jul. 8, 2014, abandoned.
Application 14/675,764 is a continuation in part of application No. 14/325,397, filed on Jul. 8, 2014, granted, now 9,450,971, issued on Sep. 20, 2016.
Application 14/675,764 is a continuation in part of application No. 14/325,398, filed on Jul. 8, 2014, granted, now 9,477,826, issued on Oct. 25, 2016.
Application 16/242,015 is a continuation in part of application No. 15/368,608, filed on Dec. 4, 2016, granted, now 10,949,757, issued on Mar. 16, 2021.
Application 15/368,608 is a continuation in part of application No. 15/001,259, filed on Jan. 20, 2016, granted, now 9,541,995, issued on Jan. 10, 2017.
Application 15/001,259 is a continuation of application No. 14/320,653, filed on Jul. 1, 2014, granted, now 9,275,337, issued on Mar. 1, 2016.
Application 14/320,653 is a continuation in part of application No. 13/922,271, filed on Jun. 20, 2013, granted, now 8,938,787, issued on Jan. 20, 2015.
Application 14/320,653 is a continuation in part of application No. 13/877,676, granted, now 9,069,942, issued on Jun. 30, 2015, previously published as PCT/IL2011/000907, filed on Nov. 29, 2011.
Application 15/368,608 is a continuation in part of application No. 14/727,873, filed on Jun. 2, 2015, granted, now 9,526,006, issued on Dec. 20, 2016.
Application 15/368,608 is a continuation in part of application No. 15/360,291, filed on Nov. 23, 2016, granted, now 9,747,436, issued on Aug. 29, 2017.
Application 14/727,873 is a continuation in part of application No. 14/718,096, filed on May 21, 2015, granted, now 9,531,701, issued on Dec. 27, 2016.
Application 14/718,096 is a continuation in part of application No. 14/675,768, filed on Apr. 1, 2015, granted, now 9,418,221, issued on Aug. 16, 2016.
Application 14/675,768 is a continuation in part of application No. 14/566,723, filed on Dec. 11, 2014, granted, now 9,071,969, issued on Jun. 30, 2015.
Claims priority of provisional application 62/621,600, filed on Jan. 25, 2018.
Claims priority of provisional application 62/190,264, filed on Jul. 9, 2015.
Claims priority of provisional application 61/973,855, filed on Apr. 2, 2014.
Claims priority of provisional application 61/417,479, filed on Nov. 29, 2010.
Claims priority of provisional application 61/843,915, filed on Jul. 9, 2013.
Prior Publication US 2024/0013225 A1, Jan. 11, 2024
This patent is subject to a terminal disclaimer.
Int. Cl. G06Q 20/40 (2012.01); G06Q 20/10 (2012.01)
CPC G06Q 20/4016 (2013.01) [G06Q 20/10 (2013.01)] 19 Claims
OG exemplary drawing
 
1. A method comprising:
(a) monitoring multiple interactions of a particular user that utilizes an electronic device to access a particular bank account;
(b) performing an analysis that is based on at least one of:
(b1) data of transactions submitted for execution in said particular bank account,
(b2) user-specific behavioral data indicating a behavioral manner in which said particular user utilizes said electronic device, extracted from monitored interactions and monitored gestures of said particular user,
(b3) data about one or more operational properties of said electronic device,
(b4) one or more signals captured from a communication channel between said electronic device and a server associated with said particular bank account;
(c) based on said analysis, generating a notification alert that said online bank account is used as a mule bank account or as a money laundering bank account or as a terror-funding bank account; and
wherein the analysis of step (b) comprises:
(A) detecting that a first amount of money was transferred from a first account to a second account;
(B) detecting that a second amount of money, which is at least 50 percent of the first amount of money, was transferred from the second account to a third account;
(C) detecting that the second account was accessed via a Remote Access channel;
(D) based cumulatively on the detecting of step (A) and the detecting of step (B) and the detecting of step (C), determining that said second account is used as a mule bank account or as a money laundering bank account or as a terror-funding bank account.