Method and system for preventing telecommunication fraud

Abstract

The invention belongs to the technical field of network security and financial risk control, and particularly relates to a method and system for preventing telecommunication fraud, and the method comprises the following specific steps: S1, a remittance side risk level pre-judgment and confirmation mechanism: after a remitter inputs collection account information and submits a transfer amount, the remitter receives the collection account information; automatically associating a public security anti-fraud database, a bank risk control blacklist and historical transaction records, performing risk grade division on a collection account, and displaying a risk prompt to a remitter in real time; and S2, a fund freezing mechanism: after the remitter transfers an account to the account of the payee, automatically marking the fund as a'to-be-authenticated state 'and freezing the fund. The fund is set to be in a to-be-authenticated state through a fund freezing mechanism, a payee is forcibly required to complete authentication to use the fund, and an operation window of'second-to-'split 'of a fraudulent is blocked in time; and in cooperation with a grading unfreezing mechanism, the one-time transfer risk is further reduced, and the fund recovery probability is remarkably improved.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of network security and financial risk control, in particular to a method and system for preventing telecom fraud. BACKGROUND

[0002] With the popularization of Internet finance, bank account transfer has become the core payment method of social and economic activities, but the convenience of real-time account has also been taken advantage of by telecom fraudsters, leading to serious challenges to user fund safety.

[0003] The current bank account system has the following outstanding problems:

[0004] 1. Instant fund arrival and free disposal: Once the remittance is completed, the funds immediately enter the recipient's account and can be transferred or withdrawn, making it difficult for the remitter to recover the funds in the event of fraud or misremittance. Due to real-time arrival, fraudsters can split the funds into multiple secondary accounts within 10 minutes, eventually flowing to overseas, and users can only recover less than 10% of the loss after reporting the case due to complex fund links and cross-border involvement.

[0005] 2. Disconnection between identity verification and fund use rights: The existing system only performs identity authentication at the time of opening an account, and subsequent receipt does not require secondary verification, allowing fraudsters to use other people's accounts ("two cards") to commit fraud. For example, a fraud gang collects more than 100 accounts at a price of 500 yuan per card by purchasing bank cards from the elderly, and uses them to receive fraudulent funds. Since the nominal person and the actual controller of the account are not the same, the police need to spend a lot of time verifying the actual user of the account when tracing the source, delaying the opportunity to freeze the funds.

[0006] 3. Insufficient adaptation to special scenarios: For elderly people who do not use smartphones, cross-border recipients, and other scenarios, there is a lack of targeted security mechanisms. For example, an elderly person receives a "health product refund" fraud message and transfers 20,000 yuan to a stranger's account as required. Since the old man cannot operate the identity authentication of the mobile bank, the funds are temporarily frozen, but since the manual verification is not completed within the specified time, the system automatically returns the funds, and the fraudsters induce the old man to transfer the funds again by claiming "operational error", ultimately successfully defrauding the funds.

[0007] 4. Imbalance between security and convenience of high-frequency accounts: High-frequency transfers between relatives, enterprises and suppliers will reduce payment efficiency if authentication is required each time; but if authentication is completely exempted, there is a risk of continuous transfers after the account is stolen. For example, a corporate finance account and a cooperative supplier account have more than 10 transfers per month, and since no authentication threshold is set, the account is stolen and continuously transferred to a stranger's account for 3 days, resulting in a cumulative loss of 800,000 yuan.

[0008] Based on the above, a method and system for preventing telecom fraud are invented. SUMMARY

[0009] To solve the above technical problems, according to one aspect of the present application, the present application provides the following technical solutions:

[0010] A method for preventing telecom fraud, comprising the following specific steps:

[0011] S1, risk level pre-judgment and confirmation mechanism of remittance end: after the remitter inputs the account information of the payee and submits the transfer amount, the remitter is automatically associated with the anti-fraud database of the public security, the bank risk control blacklist and the historical transaction records, the risk level of the account of the payee is divided, and the risk prompt is displayed to the remitter in real time;

[0012] S2, fund freezing mechanism: after the remitter transfers the account to the payee, the fund is automatically marked as "to be authenticated state" and frozen;

[0013] S3, multi-dimensional identity authentication: the payee needs to pass the basic authentication, special group authentication and cross-border payment additional authentication within the set time limit to unfreeze;

[0014] S4, dynamic authentication rule: the high-frequency account which successfully completes the authentication for many times is automatically marked as "trusted account", and the subsequent fund is directly unfrozen;

[0015] S5, hierarchical unfreezing mechanism: the unfreezing permission is set according to the transfer amount, rather than one-time full amount unfreezing;

[0016] S6, timeout and failure processing: if the payee does not complete the authentication within the set time limit, or the authentication fails, the fund is automatically returned to the remitter account; if the bank risk control system identifies that the fund exists abnormity before authentication, the refund process can be actively triggered;

[0017] S7, fraud fund backtracking and associated account freezing: if a fund is proved to be fraud fund after unfreezing, the fund backtracking is automatically started.

[0018] As a preferred scheme of the method for preventing telecom fraud, in the S3, the basic authentication is specifically: the real name authentication and face dynamic authentication are completed through the mobile banking APP of the payee bank, and the address positioning is started, and the consistency of the opening information and the current authentication information is compared by the bank authentication system.

[0019] As a preferred scheme of the method for preventing telecom fraud, in the S3, the special group authentication is specifically: for special groups, two alternative ways can be selected:

[0020] way one: the identity certificate is issued by the community, the village committee or the residents committee, and the payee handles the manual authentication in the bank;

[0021] The second mode is that the remitter supplements the description at the bank outlet, and provides the contact records and social relationship proof documents of the two parties.

[0022] As a preferred scheme of the method for preventing telecom fraud, in the S3, the additional cross-border receiving authentication is specifically that, if the receiver is a foreign account, in addition to the basic authentication, domestic direct relatives information needs to be provided, and the relatives need to sign a joint economic responsibility commitment, and undertake joint responsibility for the legality of the money.

[0023] As a preferred scheme of the method for preventing telecom fraud, in the S3, the additional cross-border receiving authentication is specifically that, if the receiver is a foreign account, in addition to the basic authentication, domestic direct relatives information needs to be provided, and the relatives need to sign a joint economic responsibility commitment, and undertake joint responsibility for the legality of the money.

[0024] As a preferred scheme of the method for preventing telecom fraud, in the S3, the additional cross-border receiving authentication is specifically that, if the receiver is a foreign account, in addition to the basic authentication, domestic direct relatives information needs to be provided, and the relatives need to sign a joint economic responsibility commitment, and undertake joint responsibility for the legality of the money.

[0025] As a preferred scheme of the method for preventing telecom fraud, in the S7, the specific steps of the fund backtracking are as follows:

[0026] S71: track the flow direction of the fund, and mark all downstream accounts receiving the fund;

[0027] S72: temporarily freeze the downstream accounts, and notify the holders of the downstream accounts to provide the fund legal source proof for unfreezing;

[0028] S73: synchronize the backtracking result to the public security anti-fraud platform, assist the police to lock the fraud fund link, and realize the "one piece of fraud fund, full link freezing and verification".

[0029] A system for preventing telecom fraud, comprising a central processing unit, a receiving account management unit, a remitting account management unit and a risk control auxiliary unit.

[0030] The central processing unit is used for receiving a transfer instruction, marking and freezing the fund; receiving an authentication result and performing an unfreezing or refund operation; and storing account authentication records and dynamic rule parameters.

[0031] The collection account management unit comprises an identity authentication module, a positioning module and a freeze / thaw module; the identity authentication module is used to collect the identity card information and face image of the beneficiary and compare them with the account opening information; the positioning module is used to obtain real-time address information; and the freeze / thaw module is used to switch the fund state according to the instruction of the central processing unit;

[0032] The remittance account management unit is used to record remittance information, receive refund instructions and complete fund return;

[0033] The risk control auxiliary unit is used to associate a fraud account blacklist and monitor the transfer information in real time, and send an abnormal early warning to the central processing unit if the risk characteristics are matched.

[0034] Compared with the prior art:

[0035] 1. By means of the fund freezing mechanism, the money is set to a "to-be-authenticated state", and the beneficiary is forced to complete the authentication before using the fund, thereby blocking the operation window of "second transfer" and "split" of the fraudsters from the time aspect; and in combination with the hierarchical thawing mechanism, the one-time transfer risk is further reduced, and the fund recovery probability is significantly improved.

[0036] 2. By means of the multi-dimensional identity authentication combination verification, the beneficiary is forced to provide real-time identity information consistent with the account opening information, thereby directly ensuring that "account user = nominal person"; and if the beneficiary is an overseas person, a domestic direct relative needs to be bound and a joint and several liability undertaking needs to be signed, thereby locking the actual responsibility subject from the legal relationship aspect and completely solving the dilemma of "nominal person without responsibility and actual controller difficult to find" of the "two-card" account.

[0037] 3. Two alternative authentication methods are provided through special population adaptation rules, which not only ensure safety but also take into account ease of use.

[0038] 4. The dynamic authentication rules stipulate that "high-frequency accounts with more than two authentications are automatically marked as trusted accounts and do not need to be authenticated subsequently", which not only ensures the authenticity of the account through the initial authentication, but also simplifies the subsequent operation through trust accumulation. At the same time, the first-time authentication of inter-personal account transfer is exempted from repeated verification, thereby further improving the efficiency of normal transactions.

[0039] 5. Through the fraud fund backtracking mechanism, all downstream accounts of the fraud fund can be automatically tracked, temporarily frozen and required to provide legal source proof, thereby forming a closed loop of "one fraud fund, full-link freeze and verification".

[0040] 6. Through the risk level prediction of the remittance end, the anti-fraud database is associated in real time, the high-risk accounts are popped up with a pre-warning and an anti-fraud short film, and the second confirmation is forced, thereby giving the user time to think. BRIEF DESCRIPTION OF DRAWINGS

[0041] Figure 1 The schematic diagram of the system framework for preventing telecom fraud. DETAILED DESCRIPTION

[0042] In order to make the objects, technical solutions and advantages of the present application clearer, the embodiments of the present application will be further described in detail below with reference to the drawings.

[0043] The present application provides a method for preventing telecom fraud, please refer to Figure 1 , which comprises the following specific steps:

[0044] S1, risk level pre-judgment and confirmation mechanism of remittance end: after the remitter inputs the account information (account number, account name) of the payee and submits the transfer amount, the payee's account is automatically associated with the anti-fraud database of the public security, the bank risk control blacklist and the historical transaction records, the risk level of the payee's account is divided (low risk / medium risk / high risk), and the risk prompt is displayed to the remitter in real time;

[0045] Low risk: the payee's account is a government agency, a regular enterprise's public account, or has a high-frequency normal transaction record with the remitter for more than half a year, and the prompt is "the account has good historical transaction record and low risk";

[0046] Medium risk: the payee's account has been opened for less than 3 months, has a recent cross-provincial / cross-border small amount exploratory transfer record, or has an indirect association with a fraud-related account, and the prompt is "the account has abnormal transaction characteristics, please confirm the identity of the payee and the purpose of the transfer", and the remitter is required to fill in the "transfer purpose" (such as "repayment" "shopping" etc.);

[0047] High risk: the payee's account is in the anti-fraud blacklist, has received a fraud-related reported fund in the recent period, or has a fund flow with multiple abnormal accounts, and the prompt is "the account is suspected of telecom fraud risk, please do not transfer to it", and a public security anti-fraud propaganda short film (15 seconds) is popped up, and the remitter is forced to confirm "knowing the risk and insisting on the transfer" through the SMS verification code.

[0048] Effects:

[0049] Risk interception from the source of remittance, risk level prompt is used to enhance the vigilance of the remitter, especially for the scene of being coerced or induced to transfer (such as when the fraudster urges "urgent transfer", the high-risk prompt can force the remitter to pause the operation);

[0050] The filling of "transfer purpose" in the medium risk scene can help the bank to trace the fund purpose subsequently, and let the remitter actively verify the transaction authenticity, and reduce the transfer caused by "mistakenly believing the fraud tactics";

[0051] The forced confirmation mechanism in the high risk scene gives the remitter time to think, and the anti-fraud propaganda short film is used to strengthen the awareness of fraud prevention, and the data shows that such intervention can reduce the success rate of transfer of high-risk accounts;

[0052] S2, fund freezing mechanism: after the remitter transfers money to the payee's account, the money is automatically marked as "to be authenticated" and frozen, at which time the money is included in the payee's account balance, but the payee cannot perform use, transfer or withdrawal operations;

[0053] S3, multi-dimensional identity authentication: the payee needs to pass the basic authentication, special group authentication and cross-border payment additional authentication within a set time limit (such as 24 hours) to unfreeze;

[0054] The basic authentication specifically includes: completing real-name authentication (identity card information verification) and face dynamic authentication (liveness detection) through the mobile banking APP of the payee bank, and enabling address positioning, and the bank authentication system compares the consistency of the opening account information and the current authentication information;

[0055] The special group authentication specifically includes: for special groups (such as the elderly who do not use smartphones), two alternative methods can be selected:

[0056] Method one: the payee goes to the bank outlet to handle manual authentication with the identity certificate issued by the community, village committee or residents committee;

[0057] Method two: the remitter goes to the bank outlet to supplement the explanation (including the payee's name, address, relationship, purpose of the money), and provides the contact records of both parties and social relationship proof documents (such as household registration books);

[0058] The cross-border payment additional authentication specifically includes: if the payee is a foreign account, in addition to the basic authentication, domestic direct relatives information (name, relationship, address, ID number, phone) needs to be provided, and the relatives need to sign a joint economic responsibility commitment, promising to bear joint responsibility for the legality of the money;

[0059] It also includes an exemption authentication scenario, which specifically includes: pension, insurance, medical subsidy, bank-issued wages and other payments issued by government agencies, and the first authentication of the transfer between different accounts owned by the person, which is automatically exempted from authentication, and the money is directly unfrozen;

[0060] In addition, after the basic authentication, the payee's account behavior track verification needs to be performed, which specifically includes: after the payee completes the basic authentication, the recent behavior track of the payee's account is automatically verified, and if the track has abnormalities (such as unusual device login + out-of-area authentication + recent frequent binding change), it is determined as "highly suspicious behavior", and the payee needs to pass "contact the usual contact person to verify" (the system sends a verification code to the 2 emergency contacts reserved by the account, and the payee needs to obtain the verification code to complete the secondary authentication).

[0061] The behavior track includes:

[0062] Whether the account login device is a commonly used device (such as a mobile phone / computer with more than 90% login records in the past 3 months);

[0063] Whether the authentication location is consistent with the commonly used transaction location of the account (such as more than 80% of transactions in the past half year occurred in city A, and the authentication location is city B without a reasonable explanation (such as not binding the "out-of-town business trip" report));

[0064] Whether the account has frequently changed the bound mobile phone number or bank card in the past 1 month;

[0065] If it is the first time to receive a large amount of money (more than 10 times the average amount of money received in the past 3 months), it is necessary to supplement the legality of the source of the money (such as uploading transaction contracts, chat record screenshots, etc.).

[0066] Effect:

[0067] Prevent the "account theft" scenario, for example, a fraudster steals another person's account information and completes identity authentication (such as making the user's main photo pass face authentication), but is intercepted due to abnormal login device and location, and needs to contact the emergency contact for verification, thereby exposing the theft behavior;

[0068] For the supplementary verification of "first large amount of money", it can identify the situation of "empty account" receiving fraud funds (such accounts usually have no reasonable transaction background and cannot provide proof of the source of the funds);

[0069] Behavior track verification and identity authentication form a "double insurance", upgrading the simple "identity authenticity" verification to "identity + behavior consistency" verification, reducing the success rate of fraudsters using other people's accounts to receive money;

[0070] S4, dynamic authentication rules: high-frequency accounts that have successfully completed authentication multiple times (such as 2 times or more) are automatically marked as "trusted accounts", and subsequent funds are directly unfrozen;

[0071] S5, hierarchical unfreezing mechanism: set unfreezing permissions according to the amount of money transferred, rather than unfreezing the full amount at once;

[0072] Small amount of money (such as 5000 yuan or less): full amount unfreezing after completing basic authentication;

[0073] Medium amount of money (5000 yuan-50,000 yuan): first unfreeze 50%, and the remaining 50% will be automatically unfrozen after 24 hours (if the bank's risk control finds abnormalities, it can be frozen at any time);

[0074] Large amount of money (more than 50,000 yuan): first unfreeze 30%, and the remaining 70% will be unfrozen after the recipient provides proof of the use of the funds (such as a housing contract, medical documents, etc.) and passes the manual review;

[0075] Among them, the unauthenticated scene (such as salary, pension) and the transfer between the trusted accounts are not subject to hierarchical unfreezing restrictions, and the full amount is immediately unfrozen;

[0076] Effects:

[0077] Reduce the risk of one-time transfer of large-scale fraudulent funds, for example, a user is scammed 100,000 yuan, even if the recipient completes the authentication, only 30,000 yuan can be used at first, and the remaining 70,000 yuan will be found to be abnormal during manual review, which can be frozen in time to recover;

[0078] The 24-hour delay unfreezing period provides a secondary verification time for the bank's risk control system, combined with subsequent transaction monitoring (such as transferring to a stranger's account immediately after unfreezing), which can trigger an emergency freezing mechanism;

[0079] The hierarchical rules take into account the convenience of small transactions and the security of large transactions, avoiding excessive control that affects normal economic activities;

[0080] S6, timeout and failure processing: if the recipient does not complete the authentication within the set time limit, or the authentication fails (such as face mismatch, inconsistent information), the money will be automatically returned to the sender's account; If the bank's risk control system identifies that the money is abnormal (such as being associated with a fraudulent account) before authentication, it can actively trigger the refund process;

[0081] S7, fraud fund backtracking and associated account freezing: if a certain amount of money is proven to be fraudulent funds (such as the recipient being identified by the police as a fraudster) after being unfrozen, the fund backtracking is automatically started;

[0082] The specific steps of fund backtracking are as follows:

[0083] S71: Track the flow of the money (including transfer, withdrawal, consumption records), and mark all downstream accounts that receive the money;

[0084] S72: Take temporary freezing measures for downstream accounts (the freezing period is the same as the original fund freezing period), and notify the downstream account holders that they need to provide "proof of legal source of funds" to unfreeze;

[0085] S73: Synchronize the backtracking results to the public security anti-fraud platform to assist the police in locking down the fraud fund link and achieve "one piece of fraudulent fund, full link freezing and verification".

[0086] Effects:

[0087] Solve the problem of "difficulty in tracking after fraudulent funds are split and transferred" in the traditional mode, expand the verification range through full-link freezing, and improve the fund recovery rate;

[0088] The freezing pressure on downstream accounts can force non-fraud associates to actively cooperate with the investigation, provide information about the source of the funds, and speed up the case investigation;

[0089] Form a "fraudulent money flow is locked" deterrent, reduce "run points" "money laundering" and other assist fraud behavior occurs.

[0090] A system for preventing telecommunications fraud, comprising a central processing unit, a payee account management unit, a remittance account management unit and a risk control auxiliary unit;

[0091] The central processing unit is used for receiving a transfer instruction, marking and freezing the money "to be authenticated", receiving an authentication result and performing a thawing or refund operation, storing account authentication records and dynamic rule parameters;

[0092] The payee account management unit includes an identity authentication module, a positioning module and a freeze / thaw module; the identity authentication module is used for collecting the identity card information and face image of the payee and comparing them with the account opening information; the positioning module is used for obtaining real-time address information; the freeze / thaw module is used for switching the fund state according to the central processing unit instruction;

[0093] The remittance account management unit is used for recording remittance information (amount, time, payee information), receiving a refund instruction and completing fund return;

[0094] The risk control auxiliary unit is used for associating fraud-related account blacklists, monitoring transfer information in real time, and sending an abnormal early warning to the central processing unit if the risk characteristics are matched.

[0095] Although the present application has been described with reference to the embodiments above, various improvements can be made thereto and components thereof can be replaced with equivalents without departing from the scope of the present application. In particular, features in the embodiments disclosed by the present application can be combined with each other in any manner as long as there is no structural conflict, and the combinations are not exhaustively described in the specification only for the purpose of saving space and resources. Therefore, the present application is not limited to the specific embodiments disclosed herein, but includes all technical solutions falling within the scope of the claims.

Claims

1. A method for preventing telecommunications fraud, characterized in that, The specific steps are as follows: S1, Risk Level Prediction and Confirmation Mechanism for Remittance: After the remitter enters the receiving account information and submits the transfer amount, the system automatically links to the public security anti-fraud database, the bank's risk control blacklist, and historical transaction records to classify the receiving account into risk levels and display risk warnings to the remitter in real time. S2, Funds Freezing Mechanism: After the remitter transfers funds to the payee's account, the funds are automatically marked as "pending authentication" and frozen; S3, Multi-dimensional Identity Authentication: The recipient must complete basic authentication, special group authentication, and additional authentication for cross-border payments within a set time limit to unfreeze the account; S4, Dynamic Authentication Rules: Frequently used accounts that have successfully completed authentication multiple times are automatically marked as "trusted accounts", and subsequent funds will be directly unfrozen; S5, Tiered Unfreezing Mechanism: Unfreezing permissions are set according to the transfer amount, rather than unfreezing the entire amount at once; S6, Timeout and Failure Handling: If the recipient fails to complete the authentication within the set time limit, or if the authentication fails, the funds will be automatically returned to the remitter's account; if the bank's risk control system identifies any abnormality in the funds before authentication, it may proactively trigger the refund process. S7, Fraudulent Funds Recovery and Related Account Freezing: If a certain amount of funds is confirmed to be fraudulent funds after being unfrozen, the fund recovery process will be automatically initiated.

2. The method for preventing telecommunications fraud according to claim 1, characterized in that, The basic authentication in S3 specifically involves: completing real-name authentication and dynamic facial recognition through the receiving bank's mobile banking app, while simultaneously enabling address location services, and having the bank's authentication system compare the account opening information with the current authentication information.

3. The method for preventing telecommunications fraud according to claim 1, characterized in that, The special population authentication in S3 specifically refers to the following: For special populations, two alternative methods can be selected: Method 1: The recipient needs to obtain identification from the community, village committee, or neighborhood committee, and then go to a bank branch for manual verification. Method 2: The remitter goes to a bank branch to provide supplementary explanations and offers contact records between the two parties and proof of their social relationship.

4. The method for preventing telecommunications fraud according to claim 1, characterized in that, The additional authentication for cross-border payments in S3 is as follows: If the recipient is a foreign account, in addition to the basic authentication, information of the immediate family member in China is required, and the family member must sign a joint and several liability commitment letter, promising to assume joint and several liability for the legality of the payment.

5. A method for preventing telecommunications fraud according to claim 1, characterized in that, The S3 also includes authentication-free scenarios, which specifically refer to: funds issued by government agencies, and transfers between different accounts under one's own name after initial authentication, which are automatically exempt from authentication and the funds are directly unfrozen.

6. The method for preventing telecommunications fraud according to claim 1, characterized in that, In S3, after basic authentication, the recipient's account behavior trajectory needs to be verified. Specifically, after the recipient completes basic authentication, the recent behavior trajectory of the receiving account is automatically verified. If there are any abnormalities in the trajectory, it is judged as "highly suspicious behavior", and the recipient needs to verify by "contacting a frequently used contact person".

7. A method for preventing telecommunications fraud according to claim 1, characterized in that, The specific steps for fund tracing in S7 are as follows: S71: Track the flow of funds and mark all downstream accounts that received the funds; S72: Temporarily freeze downstream accounts and notify downstream account holders that they must provide "proof of the legal source of funds" before the accounts can be unfrozen; S73: Synchronize the retrospective results to the public security anti-fraud platform to assist the police in locking down the fraudulent fund chain and achieve "freezing and verifying the entire chain of a single fraudulent fund".

8. A system for preventing telecommunications fraud, characterized in that, It includes a central processing unit, a receiving account management unit, a remittance account management unit, and a risk control support unit; The central processing unit is used to receive transfer instructions, mark funds as "pending authentication" and freeze them; receive authentication results and perform unfreezing or refund operations; and store account authentication records and dynamic rule parameters. The receiving account management unit includes an identity authentication module, a location module, and a freeze / unfreeze module; the identity authentication module is used to collect the payee's ID card information and facial image and compare them with the account opening information; the location module is used to obtain real-time address information; the freeze / unfreeze module is used to switch the fund status according to the instructions of the central processing unit. The remittance account management unit is used to record remittance information, receive refund instructions, and complete the return of funds; The risk control auxiliary unit is used to associate with the blacklist of accounts suspected of fraud, monitor transfer information in real time, and send an abnormal warning to the central processing unit if it matches risk characteristics.

Images