← Back to veselinpavlov.com

Transaction Monitoring — Network & Anomaly Detection

Personal project — 14 December 2025

A rule-based AML transaction monitoring engine built to flag suspicious payment patterns — the kind of logic a bank's transaction monitoring team uses to surface potential structuring, layering, and circular money-flow behaviour before it reaches a human analyst. Every transaction is checked against same-day frequency, circular flow between the same two accounts, and high-risk country exposure.

↓ Download the Excel model (.xlsx)
The full rule set and transaction log, with every flag and its underlying logic.
Download is password-protected.

Across 22 monitored transactions, exactly half were flagged — every flag traces back to a circular money flow between the same two accounts, and four of those also involved a high-risk jurisdiction (Turkey), stacking two red flags on the same transfer.

22Transactions monitored
11Flagged (50%)
3Circular account pairs detected
4High-risk country transactions

Rule logic

CheckColumnLogic
FrequencyTx Count / DaySame account, multiple transactions same day
Circular flowCircular FlagFunds sent both directions between the same two accounts
Jurisdiction riskHigh Risk CountryDestination country on a predefined high-risk list
AlertAlertFLAG if any rule above triggers, else OK

Hover a flagged row to see the specific reason it was raised.

DateFromToAmountCountryTx/DayTotal OutCircularHigh RiskAlert
01 Mar 2025A001A004€4.5NL3€70.5YesNoFLAG
01 Mar 2025A001A004€4.8NL3€70.5YesNoFLAG
01 Mar 2025A001A004€4.9NL3€70.5YesNoFLAG
02 Mar 2025A004A001€4.7NL1€9.7YesNoFLAG
02 Mar 2025A005A006€60.0TR1€60.0YesYesFLAG
02 Mar 2025A006A005€59.5TR1€59.5YesYesFLAG
03 Mar 2025A001A002€22.0FR1€70.5NoNoOK
03 Mar 2025A003A001€21.5FR2€43.0NoNoOK
03 Mar 2025A003A001€21.5FR2€43.0NoNoOK
04 Mar 2025A009A010€2.2NL1€2.2NoNoOK
04 Mar 2025A001A004€5.1NL2€70.5YesNoFLAG
04 Mar 2025A010A011€3.5DE1€3.5NoNoOK
04 Mar 2025A001A004€5.2NL2€70.5YesNoFLAG
04 Mar 2025A012A013€8.0FR1€8.0NoNoOK
04 Mar 2025A004A001€5.0NL1€9.7YesNoFLAG
05 Mar 2025A014A015€12.0NL1€12.0NoNoOK
05 Mar 2025A007A008€75.0TR1€75.0YesYesFLAG
05 Mar 2025A016A017€9.5BE1€9.5NoNoOK
05 Mar 2025A008A007€74.5TR1€74.5YesYesFLAG
06 Mar 2025A018A019€6.0NL1€6.0NoNoOK
06 Mar 2025A001A002€24.0FR1€70.5NoNoOK
06 Mar 2025A020A021€4.3DE1€4.3NoNoOK

Transactions by Country

OK vs. Flagged, by Destination Country

OKFlagged

Circular Flow Network

Detected Circular Account Pairs

Each pair sent funds back and forth between the same two accounts within days — the A005↔A006 and A007↔A008 pairs (outlined in red) also involve a high-risk country, compounding the alert.

Password Required

This file is password-protected. Enter the download password to continue.

Incorrect password. Try again.