← vijetabhatia.com Visa · Global Data Team · 2023–Present
ML-Powered · Autonomous Systems · Visa

Autonomous anomaly detection
for fraud operations

ML-powered workflows that monitor transaction patterns, detect anomalies, and trigger escalation β€” without manual intervention. A system that perceives, decides, and acts in near-real-time.

~50%
Faster Case Closure
~35%
Fewer False Positives
24/7
Autonomous Monitoring
Autonomous Pipeline Architecture
Perceive
πŸ“‘
Real-Time Stream
transaction ingestion
πŸ“Š
Pattern Monitor
ML baseline tracking
🌍
Multi-Region
MCC Γ— region Γ— acquirer
Detect
πŸ”
Anomaly Detection
statistical + ML models
🎯
Confidence Scoring
severity classification
🏷️
Pattern Labeling
known vs novel
Decide
βš–οΈ
Severity Triage
auto-classification
πŸ”€
Action Router
threshold-gated
πŸ“‹
Evidence Packager
context for escalation
Act
🚨
Auto-Escalation
fraud ops + law enforcement
πŸ‘€
Analyst Review
human-gated actions
πŸ”„
Feedback Loop
actions β†’ model retraining
Autonomous Detection in Action
Anomaly Detection Pipeline
perceive β†’ Monitoring 847K txns/hr across 12 APAC regions...
detect   β†’ ⚠ Anomaly flagged: MCC 5411 decline rate 3.2Γ— above baseline
classify β†’ Severity: HIGH Β· Pattern: novel Β· Confidence: 0.91
package β†’ Evidence bundle: 14,207 txns, 3 acquirer endpoints, trend graph
act     β†’ Auto-escalated to fraud ops Β· analyst review required for account action
loop    β†’ Analyst resolution feeding back into detection model
PM Decision Framework
Architecture Decision
Perceive β†’ Detect β†’ Decide β†’ Act
Agentic loop, not linear pipeline. Each stage is independently scalable and debuggable.
Trust Decision
Automation boundary by consequence
Automated where speed matters. Human-gated where actions are irreversible.
Product Decision
Novel patterns β†’ senior analysts
First-time anomaly types bypass auto-classification. The system knows what it doesn't know.
Compounding Decision
Feedback loop as product feature
Every analyst resolution improves detection. System gets smarter the longer it runs.
Automation Boundary β€” Where Machine Stops & Human Starts
Autonomous: Pattern logging & alert routingSpeed-critical, low consequence
Autonomous: Feedback loops & model retrainingContinuous improvement, no human risk
Human-Gated: Law enforcement escalationExternal consequences, requires confirmation
Human-Gated: Account-level actionsIrreversible β€” blocks real customers
Iteration β€” What Failed & How I Fixed It
V1 β€” Noisy
68%
false positive rate
analysts ignored alerts
β†’
V2 β€” Calibrated
41%
tuned severity thresholds
+ pattern deduplication
β†’
V3 β€” Trusted
~35%
fewer false positives
analysts act on alerts
Impact
~50%
Faster Case Closure
~35%
Fewer False Positives
24/7
Autonomous Monitoring
↻
Self-Improving System

Autonomous doesn't mean unsupervised. The most important design decision in any agentic system is where you draw the automation boundary. Get it wrong and you either have a system nobody trusts, or a system that doesn't save anyone time. Finding that line is a PM problem, not an engineering problem.