arXiv:2512.19061cs.LGcs.AI2025-12

通过转化异构链接,大幅提高大规模欺诈图谱的检测覆盖率。

Fraud Detection Through Large-Scale Graph Clustering with Heterogeneous Link Transformation

  • 区分强链接与弱链接,先聚类强链接再重构加权弱链接图
  • 节点数从2500万降至770万,检测覆盖范围翻倍且精度高
  • 适合工业级支付系统反欺诈,尤其擅长发现协同欺诈团伙

协同欺诈中多个欺诈账号协作攻击在线支付系统,形成复杂网络结构。传统方法依赖高置信度身份链接,覆盖有限;而使用全部链接则导致图碎片化,聚类效果差。本文提出一种基于图的欺诈检测框架,通过有原则的链接转换实现大规模异构图聚类。方法区分硬链接(如手机号、信用卡、身份证)与软链接(如设备指纹、Cookie、IP地址),先通过硬链接识别连通分量,合并为超节点,再重建加权软链接图,便于高效嵌入与聚类。采用LINE进行表示学习,再用HDBSCAN进行密度聚类。在真实支付平台数据集上实验显示,图规模减少至770万节点(原2500万),检测覆盖范围比仅用硬链接的方法提升一倍,且各类欺诈簇保持高精度。该框架为工业级欺诈检测提供了可扩展、实用的解决方案。

原文摘要 · Abstract (English)

Collaborative fraud, where multiple fraudulent accounts coordinate to exploit online payment systems, poses significant challenges due to the formation of complex network structures. Traditional detection methods that rely solely on high-confidence identity links suffer from limited coverage, while approaches using all available linkages often result in fragmented graphs with reduced clustering effectiveness. In this paper, we propose a novel graph-based fraud detection framework that addresses the challenge of large-scale heterogeneous graph clustering through a principled link transformation approach. Our method distinguishes between \emph{hard links} (high-confidence identity relationships such as phone numbers, credit cards, and national IDs) and \emph{soft links} (behavioral associations including device fingerprints, cookies, and IP addresses). We introduce a graph transformation technique that first identifies connected components via hard links, merges them into super-nodes, and then reconstructs a weighted soft-link graph amenable to efficient embedding and clustering. The transformed graph is processed using LINE (Large-scale Information Network Embedding) for representation learning, followed by HDBSCAN (Hierarchical Density-Based Spatial Clustering of Applications with Noise) for density-based cluster discovery. Experiments on a real-world payment platform dataset demonstrate that our approach achieves significant graph size reduction (from 25 million to 7.7 million nodes), doubles the detection coverage compared to hard-link-only baselines, and maintains high precision across identified fraud clusters. Our framework provides a scalable and practical solution for industrial-scale fraud detection systems.

欺诈检测图神经网络聚类支付安全

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。