Patent ID: 11916958
Assignee: INTUIT INC.
Field: Computer technology (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 0:
1. A computer-implemented method for automatic detection of phishing attempts, comprising:
receiving a request to perform an electronic transaction associated with a user account, wherein the request includes information regarding the user account;
generating one or more probabilities of the request being valid based on the request and processing a plurality of electronic transactions associated with one or more user accounts, wherein the processing includes:
obtaining the plurality of electronic transactions, wherein each electronic transaction includes information regarding a user account of the one or more user accounts, wherein the information regarding the user account for each electronic transaction and requested electronic transaction includes a vendor name associated with the electronic transaction;
generating a plurality of numerical representations associated with the plurality of electronic transactions based on applying a language model to at least a portion of the information of each electronic transaction of the plurality of electronic transactions, wherein:
the at least portion of the information of each electronic transaction to which the language model is applied includes the vendor name associated with the electronic transaction;
the language model includes a bidirectional language model; and
the plurality of numerical representations include a plurality of numerical vectors;

clustering the plurality of electronic transactions into one or more clusters based on applying a clustering algorithm to the plurality of numerical representations; and
for each cluster, generating one or more aggregates of the information regarding the user account across the electronic transactions of the cluster, wherein the one or more probabilities are associated with the one or more aggregates;

identifying whether the request is valid based on the one or more probabilities; and
in response to identifying that the request is not valid, providing an indication that the request is not valid.