Artificial Intelligence in Fraud Detection Training Course

Duration 10 days 20 modules · 65 contact hours
Level Intermediate Certificate on completion
Who attends Fraud Managers, Financial Crime Analysts and others
Fee from USD 2,200 KSh 190,000 for Kenyan organisations
Where 52 cities + online See dates by city
Next start 16 Nov 2026 Course code SD-FFC-037

Before you join: Participants should understand core fraud, AML or financial crime processes, including alerts, investigations, customer due diligence or transaction monitoring.

Dates & prices

Two start dates a month in every city, and live online on weekdays or weekends. Fees are per participant; classroom fees include tuition, materials, lunch and refreshments, and the certificate.

Suggest a date or city

Showing the next six months. Later dates, other cities and private deliveries for your team are available on request.

Course overview

Financial crime teams face expanding transaction volumes, fragmented customer data and fraud patterns that change faster than manual rules can be reviewed. Artificial intelligence can improve prioritisation, anomaly detection and investigator decision-making, but poorly governed models can create false positives, unfair customer outcomes, weak audit trails and regulatory exposure. Effective deployment requires more than selecting an algorithm: teams must define the fraud problem, prepare reliable data, evaluate model performance against financial loss and investigator capacity, and establish clear human oversight.

This course examines how machine learning, graph analytics, natural language processing and generative AI can support fraud detection and financial crime operations. Participants learn to frame use cases for card fraud, payment fraud, account takeover, mule accounts, trade-based financial crime and suspicious activity monitoring. They build feature sets from transactions and customer behaviour, compare supervised and unsupervised models, assess precision, recall, F1 score and cost-sensitive performance, and interpret model decisions using SHAP values. The course also addresses data governance, model risk management, bias testing, alert triage and regulatory expectations.

Teaching combines focused instructor briefings with financial-services cases, data-led group work, alert-investigation simulations and structured design reviews. Participants develop a fraud AI use-case pack from the first week, progressively adding data requirements, detection logic, validation measures, operating controls and implementation priorities. They leave with a complete, review-ready fraud detection model proposal and supporting governance documentation that can be adapted for their institution.

The course suits professionals who own, design, supervise or assure fraud and financial crime controls. It is particularly relevant to fraud operations managers, AML specialists, risk managers, data analysts, internal auditors, compliance leaders and technology teams working with fraud detection systems.

What you will be able to do

  • Define fraud detection use cases using typologies, loss drivers and measurable decision objectives
  • Prepare transaction, customer and case data for machine-learning fraud detection models
  • Build supervised classification approaches for labelled fraud and non-fraud populations
  • Apply anomaly detection and graph analytics to identify emerging fraud patterns
  • Evaluate fraud models using precision, recall, calibration and cost-sensitive thresholds
  • Interpret model alerts using feature attribution, reason codes and investigator evidence
  • Design governance controls for data quality, bias, model risk and human oversight
  • Produce a complete AI fraud detection proposal with implementation and validation plans

Benefits of attending

For you

  • Ability to assess vendor and internal AI fraud detection proposals critically
  • Practical framework for converting fraud typologies into measurable model use cases
  • Confidence interpreting precision, recall, false positives and model reason codes
  • Reusable documentation for fraud AI governance and validation discussions
  • Stronger capability to lead conversations between investigators, data teams and compliance

For your organisation

  • Better prioritisation of high-risk alerts against investigator capacity and financial loss
  • Clearer requirements for fraud data, model controls and operating ownership
  • Reduced risk of opaque models producing unsupported customer or case decisions
  • More consistent evaluation of vendor claims, model performance and implementation readiness
  • Documented approach for audit, compliance and model risk review of fraud AI

Course modules

20 modules over 10 days

Participants can define a prioritised AI fraud detection use case with measurable business objectives.

  • Fraud loss drivers mapped across prevention, detection, investigation and recovery
  • Typology-led use cases for payments, cards, account takeover and mule activity
  • Decision points separated between automated action, referral and investigator review
  • Problem statements framed with population, event, prediction horizon and action
  • Financial loss, customer friction and workload converted into success measures
  • Use-case prioritisation using impact, feasibility, data readiness and control risk

Participants can specify the data needed to support a fraud detection model and its controls.

  • Transaction, customer, device and case data mapped to fraud decisions
  • Entity identifiers reconciled across payment, CRM, sanctions and case systems
  • Data lineage documented from source extraction through model scoring outputs
  • Missing values, duplicates and delayed feeds assessed for detection impact
  • Label quality tested against confirmed fraud, chargebacks and investigation outcomes
  • Retention periods aligned with investigation needs, privacy rules and audit evidence

Participants can construct defensible fraud labels and target variables for model development.

  • Confirmed fraud labels distinguished from suspicion, disputes and operational errors
  • Target leakage identified between post-event outcomes and scoring-time variables
  • Observation windows and outcome windows set for transaction fraud prediction
  • Class imbalance measured using fraud prevalence and label distribution checks
  • Negative populations sampled without contaminating legitimate customer behaviour patterns
  • Typology changes tracked through label definitions and model segmentation

Participants can design fraud features that capture behaviour, relationships and temporal patterns.

  • Velocity features calculate transaction counts, values and frequency over time
  • Behavioural baselines compare current activity with customer historical patterns
  • Peer-group features benchmark customers against comparable accounts and merchants
  • Device, location and channel signals identify account takeover indicators
  • Aggregation windows prevent information leakage from future transaction activity
  • Feature dictionaries record definitions, sources, owners and known limitations

Participants can design a controlled detection approach combining rules and machine-learning scores.

  • Rule engines tested for coverage, conflicts, expiry dates and override ownership
  • Risk scores combined with threshold rules for controlled alert generation
  • Champion-challenger design compares legacy rules against new model performance
  • Business constraints encode prohibited actions, mandatory referrals and review requirements
  • Decision matrices assign actions by score band, evidence and customer context
  • Hybrid architectures preserve known typology controls alongside statistical detection

Participants can select and assess supervised learning methods for labelled fraud populations.

  • Logistic regression establishes interpretable baseline fraud classification performance
  • Decision trees expose nonlinear fraud indicators and operational decision paths
  • Random forests reduce variance across correlated transaction and behaviour features
  • Gradient boosting improves ranking performance for complex fraud patterns
  • Training, validation and test sets separated using time-aware data splits
  • Cross-validation choices account for rare events and temporal fraud drift

Participants can apply anomaly detection methods where confirmed fraud labels are incomplete.

  • Isolation Forest identifies unusual transactions through random feature partitioning
  • Local Outlier Factor compares observations against neighbourhood density patterns
  • Autoencoder reconstruction error flags behaviour poorly represented in training data
  • Clustering separates customer behaviour segments before anomaly score comparison
  • Anomaly scores calibrated against investigator capacity and available review evidence
  • Novel typologies distinguished from seasonal activity, operational changes and data errors

Participants can identify network features and graph patterns associated with organised fraud.

  • Graph nodes represent customers, accounts, devices, merchants and beneficiaries
  • Edges capture payments, shared devices, addresses and ownership relationships
  • Connected components reveal linked accounts requiring coordinated investigation review
  • Centrality measures identify influential intermediaries and potential mule coordinators
  • Community detection exposes tightly connected clusters with unusual transaction flows
  • Network features incorporated into alert scores without obscuring investigator evidence

Participants can define appropriate NLP applications for fraud reports, alerts and investigator notes.

  • Text classification routes complaints, claims and alerts by fraud typology
  • Named entity recognition extracts people, accounts, merchants and locations
  • Topic modelling groups recurring narratives within investigator case notes
  • Keyword rules tested against spelling variants, abbreviations and multilingual text
  • Retrieval methods locate relevant policies, prior cases and typology guidance
  • Sensitive narrative data controlled through access restrictions and redaction rules

Participants can assess controlled generative AI uses within fraud investigation workflows.

  • Case summaries generated from approved evidence with mandatory source citations
  • Prompt templates constrain outputs to investigation facts and specified formats
  • Retrieval-augmented generation grounds responses in controlled policy and case repositories
  • Hallucination tests compare generated conclusions against source evidence and reviewer judgement
  • Human approval gates prevent unsupported escalations, closures and customer communications
  • Prompt logs retained for quality review, auditability and incident investigation

Participants can evaluate fraud models using detection, operational and financial performance measures.

  • Confusion matrices separate true positives, false positives and missed fraud
  • Precision and recall assessed against alert volumes and fraud detection needs
  • F1 score balances precision and recall for comparative model selection
  • Precision-recall curves outperform accuracy for highly imbalanced fraud populations
  • Thresholds selected using fraud loss, review cost and customer intervention impact
  • Calibration testing checks whether predicted probabilities match observed fraud rates

Participants can design an alert workflow that converts model outputs into controlled investigations.

  • Alert queues ranked by expected loss, confidence and available evidence
  • Reason codes present principal risk indicators to fraud investigators
  • Service-level targets distinguish urgent payment intervention from routine review
  • Case management fields capture investigator decisions, rationale and evidence sources
  • Feedback loops convert investigation outcomes into corrected training labels
  • Quality assurance samples closed alerts, escalations and automated decisions

Participants can explain model outputs to investigators, control owners and review functions.

  • SHAP values quantify feature contributions to individual fraud risk scores
  • Global feature importance identifies drivers across the scored population
  • Reason codes translated into plain language without overstating causal conclusions
  • Counterfactual testing examines score changes under plausible alternative conditions
  • Investigator evidence distinguished from model indicators and statistical associations
  • Explanation records retained with alert decisions and subsequent case outcomes

Participants can test fraud models for unequal outcomes and define proportionate mitigations.

  • Protected characteristics identified within legal, ethical and data-access constraints
  • Disparate impact tests compare intervention rates across relevant customer groups
  • False-positive disparities examined for blocked payments and account restrictions
  • Proxy variables assessed for indirect discrimination and unjustified correlation
  • Fairness trade-offs documented alongside fraud loss and detection performance
  • Customer remediation paths address incorrect declines, blocks and adverse actions

Participants can prepare a validation plan for an AI-enabled fraud detection model.

  • Model inventories record purpose, owner, version, dependencies and risk rating
  • Independent validation challenges assumptions, data, methodology and outcome stability
  • Back-testing compares prior scores with realised fraud and investigator outcomes
  • Sensitivity analysis tests performance under changed thresholds and input distributions
  • Concept drift monitored through population stability and fraud-rate changes
  • Validation findings tracked through remediation owners, deadlines and closure evidence

Participants can establish governance controls for lawful, accountable fraud AI deployment.

  • FATF risk-based approach connects detection controls with documented financial crime risks
  • Data minimisation limits model inputs to defined fraud detection purposes
  • Access controls separate data preparation, model development and approval responsibilities
  • Human oversight requirements define review authority, escalation and intervention boundaries
  • Audit trails preserve inputs, scores, decisions, overrides and model versions
  • Third-party governance assesses vendor data use, testing evidence and contractual controls

Participants can plan the deployment of a fraud detection model into operational processes.

  • Batch and real-time scoring compared against payment decision timing requirements
  • Application programming interfaces define score requests, responses and error handling
  • Feature stores control consistent variables between development and production
  • Release management documents testing, approvals, rollback triggers and deployment evidence
  • RACI matrices assign accountability across fraud, data, technology and compliance
  • Operational dashboards track alerts, losses, model health and investigator workload

Participants can assess fraud AI suppliers and compare internal build options objectively.

  • Vendor claims tested against labelled data, scenarios and operational acceptance criteria
  • Model documentation requested for features, performance, explainability and limitations
  • Data residency, retention and subcontractor arrangements assessed before procurement approval
  • Integration effort estimated across data feeds, case systems and payment platforms
  • Commercial terms reviewed for model updates, support, audit access and liability
  • Build-versus-buy scorecards compare control, cost, skills and implementation timelines

Participants can design ongoing monitoring for fraud effectiveness, data stability and control performance.

  • Key risk indicators track fraud losses, detection rates and customer interventions
  • Population stability index identifies shifts in production feature distributions
  • Performance monitoring uses delayed labels, chargebacks and confirmed case outcomes
  • Alert ageing reveals bottlenecks, missed service targets and capacity constraints
  • Retraining triggers specify material drift, typology change and validation requirements
  • Control testing verifies override use, access logs and approval compliance

Participants can build, review and present a complete fraud AI detection proposal with model, governance and implementation components.

  • Use-case charter defines typology, decision, scope, objectives and accountable owner
  • Data specification maps sources, labels, features, lineage and quality controls
  • Detection design combines model method, rules, thresholds and referral pathways
  • Performance plan sets validation measures, loss assumptions and acceptance criteria
  • Governance pack documents explainability, fairness, privacy, oversight and audit trails
  • Implementation roadmap sequences integration, piloting, approvals, monitoring and retraining
  • Peer review challenges assumptions, evidence gaps, control weaknesses and delivery risks

Exercises and examples are adapted to each cohort's sectors and roles.

What you take back to work

  1. Fraud AI use-case charter template
  2. Fraud data and feature specification
  3. Model performance and threshold scorecard
  4. Alert triage decision matrix
  5. AI fraud governance checklist
  6. Fraud detection implementation roadmap

Who should attend

  • Fraud Managers — responsible for detection strategy, alert volumes and loss reduction
  • Financial Crime Analysts — assessing suspicious activity and improving investigative prioritisation
  • AML and Compliance Managers — overseeing controls, regulatory obligations and escalation decisions
  • Risk Managers — evaluating model risk, control effectiveness and residual fraud exposure
  • Data Analysts — preparing financial crime data and supporting model development
  • Internal Auditors — testing AI-enabled fraud controls, governance and evidence trails

Skills and tools covered

Fraud model designTransaction data analysisAlert triageModel performance testingExplainable AIFinancial crime governance

Tools and standards

CRISP-DM, FATF Risk-Based Approach, SHAP, ISO/IEC 23894

How the course runs

Training methodology

The instructor uses short technical briefings to establish methods, followed by banking, payments and corporate fraud cases. Participants analyse transaction patterns, define fraud features, assess model outputs and make alert-prioritisation decisions in small groups. Simulations test the trade-offs between detection rates, false positives, customer friction and investigator workload. Structured review sessions examine model documentation, explainability evidence and governance controls. Individual application planning links course tools to participants’ own fraud, AML or control environment.

Requirements and prerequisites

Participants should understand core fraud, AML or financial crime processes, including alerts, investigations, customer due diligence or transaction monitoring. Familiarity with spreadsheets and basic data concepts such as fields, records, data quality and simple ratios is expected. Experience working with fraud cases, risk controls, payments, audit or compliance is useful. Programming, advanced statistics and prior machine-learning experience are not required. The course explains technical concepts through fraud detection decisions, but it is not intended as an introductory course on financial crime fundamentals.

A typical training day

08:30 – 10:30First session
10:30 – 10:45Refreshment break
10:45 – 12:30Second session
12:30 – 13:30Lunch and networking
13:30 – 15:00Third session
15:00 – 15:15Refreshment break
15:15 – 16:30Workshop and daily review

Live online deliveries follow the same structure in East Africa Time, with shorter screen blocks and longer breaks.

What the fee includes

  • Instruction by a practitioner facilitator
  • Full course workbook and materials
  • Exercise files, templates and case studies
  • Refreshments and lunch on classroom deliveries
  • Certificate of completion
  • Post-course application plan

Frequently asked questions

You should understand fraud, AML, payments, audit, risk or compliance processes and be comfortable working with structured business data. You do not need programming skills, advanced statistics or previous machine-learning experience.

Bring examples of fraud typologies, alert reports, data issues or model questions from your workplace where permitted. A laptop is useful for reviewing course materials and completing application-planning work.

It is designed for professionals who manage, investigate, govern, assure or support fraud detection and financial crime controls. It is especially suitable for fraud, compliance, risk, data, technology and internal audit roles.

The course focuses on applying AI methods to fraud detection decisions, alert operations and financial crime controls. It does not teach general AML fundamentals in depth or train participants to become specialist data scientists.

Participants develop a fraud AI use-case pack that can be adapted to a current detection problem, vendor review or model governance review. The templates support discussions with investigators, data teams, compliance leaders and model risk functions.

The first part establishes fraud use cases, data, features and detection methods, with participants building their own working materials. The second part concentrates on performance, explainability, governance, deployment and the final proposal presentation.

Questions about this course?

Ask about dates, fees, group bookings or running it for your team. Our training team replies by email.