Patent ID: 7761379

Claim:
A computer program product comprising: a storage medium readable by at least one processor and storing instructions for execution by the at least one processor for: defining a compromise cluster from a detected compromise of a plurality of financial transaction devices; forming a device holder profile and a merchant profile for each of the plurality of financial transaction devices that define the compromise cluster, the device holder profile including device-level predictive variables indicative of fraud, and the merchant profile including merchant fraud detection variables indicative of fraud and device testing associated with a merchant used by at least one of the plurality of transaction devices; forming a compromise device global profile based on the compromise cluster and keyed from the device holder profile, the compromise device global profile including transaction arrays based on a transaction history for each of the plurality of financial transaction devices indicative of fraud patterns across and between each of the plurality of financial transaction devices associated with the compromise cluster; forming a compromise merchant global profile based on the compromise cluster and keyed from the merchant profile, the compromise merchant global profile including a number of time-indexed arrays comprising a number of financial transaction devices, and fraud cases thereof, that have transacted with the merchant; forming a compromised portfolio profile indexed with the compromise cluster based on two-way linked lists across device holder profiles, the compromised portfolio profile including compromise-level predictive variable indicative of a severity of the detected compromise; and generating a fraud score based on the compromise-level predictive variables and device-level predictive variables, the fraud score representing a likelihood that any one financial transaction device of the compromise cluster will be used fraudulently based on real-time transaction data related to the one financial transaction device and to the plurality of financial transaction devices of the compromise cluster.