A Clustering-Based Framework for Identifying Suspicious Trading Patterns in Capital Market
Summary
This paper presents an unsupervised clustering-based framework using K-Means++ to detect suspicious trading patterns in capital market data, achieving a silhouette score of 0.561 and identifying 2.02% of trades as potentially fraudulent.
View Cached Full Text
Cached at: 07/07/26, 04:36 AM
# A Clustering-Based Framework for Identifying Suspicious Trading Patterns in Capital Market
Source: [https://arxiv.org/html/2607.04184](https://arxiv.org/html/2607.04184)
Romona Magdalene SarkarSabiha Khair OhiIftekharul MobinDepartment of Computer Science & Engineering American International University\-Bangladesh Dhaka, Bangladesh iftekhar\.mobin@aiub\.edu
###### Abstract
Market manipulation is the dubious practice of manipulating stock prices in order to make a quick profit, which truly degrades confidence on trading platforms\. We implemented an unsupervised fraud\-detection toolkit that begins with K\-Means\+\+ clustering to address this issue\. A dataset of roughly one million financial transactions from 2012 to 2024 is used\. In order to identify fraudulent trades and categorize them using market practice heuristic thresholds, the study suggests a clustering\-based pipeline\. The method highlights 2\.02% of trades as suspicious where 51\.10% clearly indicate spoofing, 0\.10% indicate pump and dump, 0\.55% indicate insider trading, 1\.43% indicate a fake breakout, and 46\.83% are unclassified\. Despite the lack of ground truth, the model’s performance is confirmed by a Silhouette Score of 0\.561\.
## IIntroduction
Every nation’s infrastructure is extremely dependent on the state of its economy\. An essential component of the nation’s economic growth is the stock market\. As new products and trends shape the market, stock markets are evolving\. The idea of a stock market is slowly gaining momentum in Bangladesh\. Despite improvements in financial literacy, DSE participation is still low\. Growth is still low because of investor mistrust, anticipated dangers, and previous market fraud incidents\[[2](https://arxiv.org/html/2607.04184#bib.bib4)\]\. Due to its isolation from international markets the DSE has limited growth especially in times of crisis like COVID\-19\[[5](https://arxiv.org/html/2607.04184#bib.bib5)\]\. The Dhaka Stock Exchange shows chronic volatility clustering due to severe volatility of the Bangladeshi stock market\. Macroeconomic factors such as inflation, interest rates, currency rates, and external shocks had a significant impact on it\[[9](https://arxiv.org/html/2607.04184#bib.bib19)\]\. Investor trust has been damage and long\-term economic progress has been hampered by problems including insider trading and manipulation\[[19](https://arxiv.org/html/2607.04184#bib.bib7)\]\.
Because they rely on labeled data and predefined patterns, traditional regulatory and supervised machine learning approaches frequently fail to identify complex fraudulent activities in financial markets\[[18](https://arxiv.org/html/2607.04184#bib.bib11)\]\. K\-Means clustering has demonstrated promise in fraud detection by rapidly classifying regular and suspicious transactions\[[8](https://arxiv.org/html/2607.04184#bib.bib1)\]\. A lightweight, unsupervised, clustering\-based fraud detection framework that can adaptively identify suspicious trading behaviors from evolving market data is critically needed\.This study develops a generic pipeline capable of detecting potential market manipulation and manipulative behaviors in historical stock trading data\.
Figure 1:Market manipulation detection workflowThe main contributions of this research include \-
1. 1\.We propose a scalable unsupervised Stock Market Manipulation Detection \(SMMD\) framework that integrates clustering\-based structural anomaly detection with behavioral financial heuristics\.
2. 2\.We extract nine technical indicators using 30\-day rolling windows to capture temporal patterns indicative of abnormal trading behavior\.
3. 3\.K\-Means outperforms DBSCAN, OPTICS, and hierarchical clustering in accuracy \(0\.987\), silhouette score \(0\.965\), and scalability, making it highly effective for detecting sparse fraudulent trading patterns\[[13](https://arxiv.org/html/2607.04184#bib.bib20)\]\.The proposed KMeans clustering algorithm marks outliers as potential indicators of suspicious activity and natural clusters of regular trading patterns\.
4. 4\.We provide interpretable fraud\-type categorization aligned with real\-world manipulation patterns\.
5. 5\.We present an adaptive percentile\-based risk categorization approach and a symbol\-level suspicion rating system\.
6. 6\.To minimize false positives, we develop a hybrid anomaly filtering system that combines percentile\-based behavioral criteria with distance\-based outlier detection\.
## IILiterature Review
Traditional supervised learning models have been widely used for fraud detection, but their effectiveness is confined by the need for enormous volumes of labeled data and inability to identify key fraud patterns\. Currently, more researchers are focusing on unsupervised learning methods that could overcome these issues, especially clustering algorithms, which enable anomaly detection in unlabeled information\. Zengyi et al\.\[[8](https://arxiv.org/html/2607.04184#bib.bib1)\]performed actual transaction data analysis in the identification of financial fraud using the K\-means unsupervised clustering technique\. Principal Component Analysis was used for the simplification of data and the identification of key elements useful in fraud detection\.
SimCLR and its usage were introduced by Xuan Li et al\. in 2024\[[16](https://arxiv.org/html/2607.04184#bib.bib2)\]\. SimCLR identifies transaction patterns and identifies unusual transaction activities without requiring supervision\. The authors conducted an experiment on an eBay transaction data set which contained all sorts of actions\. The research used various ways of data preparation and an exclusive technique which uses SimCLR contrastive learning\.
To be able to detect anomalies within stock price time series data, Wenjie, Ruofan, and Bofan \(2020\)\[[20](https://arxiv.org/html/2607.04184#bib.bib10)\]designed a deep learning model that incorporated Conv1D and LSTM\. Conv1D enabled it to divide data into 30\-day chunks\. Subsequent LSTM layers enabled it to detect long\-term trends\. The model also incorporated three dense layers for forecasting\.
Li et al\. \(2025\)\[[11](https://arxiv.org/html/2607.04184#bib.bib3)\]developed an ensemble machine learning framework to identify unusual trading by APAC investors in U\.S\. markets\. It removed the error rates by 34\.7% and obtained an AUC\-ROC of 0\.971 using data from approximately 847,000 accounts across twelve APAC economies\.The study emphasizes the significance of incorporating behavioral economics and advanced machine learning into RegTech\. To detect fintech fraud Darwish et al\. \(2025\)\[[3](https://arxiv.org/html/2607.04184#bib.bib6)\]presented a multi\-stage hybrid methodology\. To solve class imbalance, they used rule\-based filtering, K\-means clustering, Artificial Bee Colony \(ABC\) optimization, and KNN classification with ABC\-sampling\.On e\-commerce datasets, it obtained 95\.0% accuracy\.It reduces false positives and improves robustness in fraud detection using unbalanced data\.
## IIIResearch Methodology
An unsupervised learning model is proposed to detect the manipulated stocks of daily stock data from 2012 to 2024\. Necessary steps have been taken to preprocess the data\.
Fig\.[1](https://arxiv.org/html/2607.04184#S1.F1)outlines our study’s process\.
### III\-AData Preprocessing
To ensure the quality and reliability of the stock market dataset, a series of preprocessing steps were implemented:
- •The ”Date” field was converted to the right datetime format, and duplicate, erroneous, and incomplete entries were eliminated from the data\.
- •Dropna\(\) was used to eliminate missing values in the rows, leaving a clean dataset with 1,019,783 rows\.
### III\-BFeature Engineering
To enhance the model’s ability to detect suspicious trading patterns, multiple features were engineered from the cleaned stock dataset\. Nine new features were developed using a 30\-day rolling frame to capture trading trends and detect anomalies\. Infinite division values were substituted with NaNs, then replaced with default values\.Before being employed in anomaly detection clustering, all features were standardized\.
### III\-CFeature Scaling
In machine learning, feature scaling is a method for normalizing independent variables or features to a specific range\[[7](https://arxiv.org/html/2607.04184#bib.bib9)\]\. After cleaning all features were consistent\. Then, we standardized the selected features with StandardScaler, which gives a mean of 0 and a standard deviation of 1\. This phase guarantees that all features contribute equally to the clustering procedure by increasing model performance and stability\. The pseudocode for Algorithm[1](https://arxiv.org/html/2607.04184#alg1)outlines a six\-phase unsupervised pipeline to detect anomalous trading patterns in daily stock data spanning 2012–2024\. The definitions of all the variables used in the pseudocode are provided in Table[I](https://arxiv.org/html/2607.04184#S3.T1)\.
### III\-DModel Training
Clustering is an unsupervised classification method that divides a set of multidimensional data into clusters based on a predetermined criterion\[[15](https://arxiv.org/html/2607.04184#bib.bib16)\]\.
#### III\-D1K\-means\+\+ Clustering Algorithm
K\-means\+\+ is a popular variant of K\-means for minimizing the Sum of Squared Euclidean Distances \(SSEDM\)\. K\-means\+\+ iteratively selects initial cluster centres in a way that spreads them out, allowing the algorithm to converge faster and avoid poor local minima\[[1](https://arxiv.org/html/2607.04184#bib.bib17)\]\.
#### III\-D2Clustering with K\-Means\+\+ using the Elbow Method
To establish a k value, which is applied to cluster the datasets into k sets, we used the elbow approach to calculate the number of clusters\. From the plot, we can see a significant decrease in inertia from k = 2 to 6\.
Fig\.[2](https://arxiv.org/html/2607.04184#S3.F2)shows the elbow method used for optimal k clusters\.
#### III\-D3K\-Means\+\+ Algorithm Implementation Steps
This whole algorithm operates in the following steps\[[10](https://arxiv.org/html/2607.04184#bib.bib15)\]:
- •In order to find the value of k we used the technique of Elbow\. The value of k is chosen where the reduction in inertia slows down\.
- •The initial location of the centroid is random\. For each observation, the closest centroid in Euclidean distance is assigned\. Then the center of mass is found for each of the k groups\.
- •The process is stopped when there is less than a certain fixed distance between the two centers of mass\. Otherwise, the process is repeated\.
### III\-EProposed Algorithm: Stock Market Manipulation Detection \(SMMD\)
Algorithm 1SMMD: Stock Market Manipulation Detection1Excel sheets 2010–2020, 2021–2024; exclude
\{2010,2011\}\\\{2010,2011\\\};
k=5k=5,
p95p\_\{95\},
Δpthr=10\\Delta p\_\{thr\}=10
2Flagged trades, fraud type, risk score, metrics
3// Load & Clean
4
df←Concat\(Load\(2010–2020\),Load\(2021–2024\)\)\\texttt\{df\}\\leftarrow\\textsc\{Concat\}\(\\text\{Load\(2010\-\-2020\)\},\\text\{Load\(2021\-\-2024\)\}\)
5Filter out years
∈\{2010,2011\}\\in\\\{2010,2011\\\}; replaceNULL
→\\toNaN
6
cleaned\_df←DropNa\(df\)\\texttt\{cleaned\\\_df\}\\leftarrow\\textsc\{DropNa\}\(df\)
7// Features
8foreach row
∈\\incleaned\_dfdo
9
ΔP%←C−OO×100\\Delta P\\%\\leftarrow\\frac\{C\-O\}\{O\}\\times 100
10
R←H−LR\\leftarrow H\-L
11endfor
12Group bySymbol
→\\toGG
13foreach
g∈Gg\\in Gdo
14
V30←RollMean\(g\.Vol,30\)V\_\{30\}\\leftarrow\\textsc\{RollMean\}\(g\.\\text\{Vol\},30\)
15
T30←RollMean\(g\.Trade,30\)T\_\{30\}\\leftarrow\\textsc\{RollMean\}\(g\.\\text\{Trade\},30\)
16
σ30←RollStd\(g\.Close,30\)\\sigma\_\{30\}\\leftarrow\\textsc\{RollStd\}\(g\.\\text\{Close\},30\)
17
SV=V/V30,ST=T/T30,STurn=Turn/Turn30S\_\{V\}=V/V\_\{30\},\\;S\_\{T\}=T/T\_\{30\},\\;S\_\{Turn\}=Turn/Turn\_\{30\}
18
VWAP=Turn/V,Pavg=\(O\+C\)/2VWAP=Turn/V,\\;P\_\{avg\}=\(O\+C\)/2
19endfor
20// Scale & Cluster
21
X←\[ΔP%,R,σ30,SV,ST,STurn,VWAP\]X\\leftarrow\[\\Delta P\\%,R,\\sigma\_\{30\},S\_\{V\},S\_\{T\},S\_\{Turn\},VWAP\]
22
X←RemoveInfNaN\(X\)X\\leftarrow\\textsc\{RemoveInfNaN\}\(X\)
23
Xs←Standardize\(X\)X\_\{s\}\\leftarrow\\textsc\{Standardize\}\(X\)
24
M←KMeans\(Xs,k\)M\\leftarrow\\textsc\{KMeans\}\(X\_\{s\},k\)
25
Cluster←Predict\(M\)\\texttt\{Cluster\}\\leftarrow\\textsc\{Predict\}\(M\)
26// Anomaly Detection
27
di←‖xi−ccluster‖2d\_\{i\}\\leftarrow\\\|x\_\{i\}\-c\_\{\\text\{cluster\}\}\\\|\_\{2\}
28
td←Quantile\(d,0\.95\)t\_\{d\}\\leftarrow\\textsc\{Quantile\}\(d,0\.95\)
29
tV,tT←95tht\_\{V\},t\_\{T\}\\leftarrow 95^\{th\}percentile of
SV,STS\_\{V\},S\_\{T\}
30foreach rowdo
31if
di\>td∧\(\|ΔP%\|\>10∨SV\>tV∨ST\>tT\)d\_\{i\}\>t\_\{d\}\\land\(\|\\Delta P\\%\|\>10\\lor S\_\{V\}\>t\_\{V\}\\lor S\_\{T\}\>t\_\{T\}\)then
32Suspicious
←\\leftarrowTrue
33endif
34endfor
35// Risk & Fraud Labeling
36Group bySymbol
→\\toGsG\_\{s\}
37foreach
g∈Gsg\\in G\_\{s\}do
38
Score←\(%suspicious\)×100Score\\leftarrow\(\\%\\text\{suspicious\}\)\\times 100Risk=\{Critical RiskScore\>90High Risk75<Score≤90Medium Risk50<Score≤75Low Risk25<Score≤50Minimal RiskScore≤25\\text\{Risk\}=\\begin\{cases\}\\text\{Critical Risk\}&Score\>90\\\\ \\text\{High Risk\}&75<Score\\leq 90\\\\ \\text\{Medium Risk\}&50<Score\\leq 75\\\\ \\text\{Low Risk\}&25<Score\\leq 50\\\\ \\text\{Minimal Risk\}&Score\\leq 25\\end\{cases\}
39Sort byDate
40
→\\toCheck 5\-day future:pump\-and\-dump,rug pull,spoofing, etc\.
41endfor
42// Evaluate
43
Sil←Silhouette\(Sample\(Xs≤10k\),Cluster\)\\text\{Sil\}\\leftarrow\\textsc\{Silhouette\}\(\\text\{Sample\}\(X\_\{s\}\\leq 10k\),\\text\{Cluster\}\)
44Plot fraud type distribution; output ranked symbols
TABLE I:Variable definitions used in the Stock Market Manipulation Detection \(SMMD\) pseudocode\.
Figure 2:Elbow Method for Optimal k
### III\-FModel Evaluation
Silhouette Score: Silhouette analysis mainly checks how close each item in the cluster is to items in other clusters\. The score value ranges from \-1 to \+1\. A score value of \+1 indicates that objects are well\-clustered, whereas a score value of \-1 shows that the objects are not correctly clustered\[[14](https://arxiv.org/html/2607.04184#bib.bib18)\]\.
For a single samplei:s\(i\)=b\(i\)−a\(i\)max\{a\(i\),b\(i\)\}\\begin\{array\}\[\]\{l\}\\text\{ For a single sample \}i\\text\{ : \}\\\\ s\(i\)=\\frac\{b\(i\)\-a\(i\)\}\{\\max\\\{a\(i\),b\(i\)\\\}\}\\end\{array\}\(1\)Where:
1. 1\.a\(i\) = average distance between i and all other points in the same cluster\.
2. 2\.b\(i\) = average distance between i and all points reside in any other cluster\.
## IVResult and Discussion
### IV\-AAnomaly Detection Results
Outliers were spotted by calculating how far each trade was from its cluster’s center\.The top 5% farthest labeled as structural outliers\. To detect suspicious trades, behavioral thresholds such as volume spikes, transaction count, turnover which is above the 95th percentile\[[4](https://arxiv.org/html/2607.04184#bib.bib14)\],and price fluctuations greater than 10% were observed\. Only a trade that is distant from a cluster and exhibited at least one of the following behaviors would be considered suspicious\. Lastly,the suspicious trade is processed by a fraud detection scoring system\.
### IV\-BSuspicious Symbol Scoring
The suspicion score for stocks is calculated by combining fraud frequency and anomaly severity\.The Frequency indicates if the unusual activity happen frequently and the Severity determines how extreme the unusual trades are\.The formula is defined in the equation 2 :
Suspicion score=α\(FT×100\)\+\(1−α\)\(PR\(D\)\)\\text\{Suspicion score\}=\\alpha\\left\(\\frac\{F\}\{T\}\\times 100\\right\)\+\(1\-\\alpha\)\\bigl\(PR\(D\)\\bigr\)\(2\)
where:
- •F = Number of flagged trades\.
- •T = Total number of stock trades\.
- •PR\(D\) = Percentile rank of the anomaly distance\.
- •α\\alpha= Weight parameter for frequency\.
- •1−α1\-\\alpha= Weight parameter for severity\.
### IV\-CRisk Categorization Method
The next stage of the study is to classify stocks into various risk levels after calculating each stock’s final suspicion score\. Table[II](https://arxiv.org/html/2607.04184#S4.T2)shows the risk category and its percentile range\.
TABLE II:Adaptive Risk Categorization Based on Percentile ThresholdsFigure 3:DSE Stocks closing price with detected suspicious trades \(2012–2024\)
Figure 4:NSE Stocks closing price with detected suspicious trades \(2012–2025\)
### IV\-DFraud Type Classification
The flagged trades were examined and sorted into six fraud categories\. Fig\.[5](https://arxiv.org/html/2607.04184#S4.F5)shows fraud pattern breakdown of top 20 suspicious stocks\.

Figure 5:Fraud Pattern Breakdown of Top 20 Suspicious Stocks- •Pump & Dump: A stock’s price quickly rises by over 10%\[[17](https://arxiv.org/html/2607.04184#bib.bib8)\]along with high trading volume, and then the price falls again within five days\.
- •Spoofing: High order or transaction volume with minor price fluctuation\[[6](https://arxiv.org/html/2607.04184#bib.bib12)\]\.
- •Rug Pull: A sharp rise in both price and volume was followed by a steep decline\[[12](https://arxiv.org/html/2607.04184#bib.bib13)\]\.
- •Insider Trading:A sharp increase of more than ten percent on a low\-volume spike of less than one point, which suggests possible insider trading\.
- •Fake Breakout: The price increased over 10% with high volatility, but reversed within a week\.
- •Unclassified Fraud: If none of the above fits, we toss the odd data point into unclassified\.
### IV\-EFraud Type Classification Criteria
Based on observable features, heuristic rules classified suspicious trading behavior to match real\-world fraud patterns\. \. The Table[III](https://arxiv.org/html/2607.04184#S4.T3)shows the particular criteria used to classify flagged trades as known fraud types\.
TABLE III:Heuristic Rules and Feature Thresholds Used for Fraud Type Classification
### IV\-FVisualization of fraud trades
Each stock’s closing price is plotted alongside red markers that indicate suspicious trades in the visualization\. According to their Suspicion Scores, stocks like UNILEVERCL \(44\.1%\), SQURPHARMA \(22\.1%\), ACI \(19\.3%\), HEIDELBCEM \(18\.2%\), MEGCONMILK \(18\.9%\), and BEXIMCO \(17\.9%\) display a variety of anomalous density\. To understand when these suspicious trades happened, a chart of flagged trades marked by red ‘×’ symbols\. Fig\.[4](https://arxiv.org/html/2607.04184#S4.F4)depicts some random 6 suspicious stocks of DSE\. Our proposed manipulation detection system is applied on the NSE \(National stock market of India\) dataset to test its effectiveness in a global market context in Fig\.[4](https://arxiv.org/html/2607.04184#S4.F4)\.
### IV\-GModel Evaluation
The assessment of the clustering\-based anomaly detection system relied primarily on the Silhouette Score which served as the main indicator of model performance\.
The obtained scores of 0\.561 and 0\.292 show well\-defined and separated clusters for both exchanges\.
### IV\-HResult Summary
The Clustering Model performed effectively by achieving a silhouette score of 0\.561\. 2\.02% of deals were reported as suspicious which indicates a suitable detection rate for identifying anomalies in DSE financial data\.Spoofing was the most frequent containing 51\.1% cases while other types of fraud were less frequent\.This approach should work with datasets from around the globe which remain unlabeled dataset\. It worked well even in Bangladesh’s unstable trading conditions\.
## VConclusion
The system detects, visualizes, and interprets unusual trading behavior in real\-world market data\. This checked more than one million trades from the Dhaka Stock Exchange with the help of rules and grouping, yielding a varying verification rate of 2\.02% with a silhouette score of 0\.561\. It performs well on noisy and irregular data\.It works well on global data and help label trading dataset that isn’t structured\. The lack of confirmed ground\-truth data in the study is a disadvantage\.In addition,the thresholds could not adapt well to highly dynamic marketplaces\. While calculating suspicion scores, the 60/40 weight distribution is a heuristic that may need to be adjusted for other trading environments\.The system emphasizes classifying anomalous stock returns rather than precise classification\. Advanced clustering techniques like DBSCAN/HDBSCAN and scalable real\-time processing are the indications of future enhancements\.The system may become more effective and flexible for market analysts and regulators by ensuring stability and market transparency in global markets\.
## References
- \[1\]R\. Aliguliyev and S\. F\. Tahirzada\(2023\)Performance comparison of k\-means, parallel k\-means and k\-means\+\+\.Note:Unpublished manuscriptCited by:[§III\-D1](https://arxiv.org/html/2607.04184#S3.SS4.SSS1.p1.1)\.
- \[2\]N\. T\. Chowdhury, N\. S\. Mahdzan, and M\. Rahman\(2024\)Beyond intuition: the role of financial knowledge in navigating investments in emerging markets\.International Journal of Economics and Financial Issues14\(4\),pp\. 267–281\.Cited by:[§I](https://arxiv.org/html/2607.04184#S1.p1.1)\.
- \[3\]S\. M\. Darwish, A\. I\. Salama, and A\. A\. Elzoghabi\(2025\)Intelligent approach to detecting online fraudulent trading with solution for imbalanced data in fintech forensics\.XX15\(1\),pp\. 17983\.Cited by:[§II](https://arxiv.org/html/2607.04184#S2.p4.1)\.
- \[4\]T\. Fabre and I\. M\. Toke\(2025\)High\-frequency market manipulation detection with a markov\-modulated hawkes process\.Note:arXiv preprint arXiv:2502\.04027Accessed: 2026\-02\-20External Links:[Link](https://arxiv.org/pdf/2502.04027)Cited by:[§IV\-A](https://arxiv.org/html/2607.04184#S4.SS1.p1.1)\.
- \[5\]F\. A\. B\. Habib\(2024\)Evaluating the effectiveness of macroeconomic determinants on the performance of the dhaka stock exchange: a time series approach\.Journal of EkonomiXX\(XX\),pp\. XX–XX\.External Links:[Document](https://dx.doi.org/10.58251/ekonomi.1550307)Cited by:[§I](https://arxiv.org/html/2607.04184#S1.p1.1)\.
- \[6\]J\. Hambuckers, L\. Sun, and L\. Trapin\(2023\)Measuring tail risk at high\-frequency: an L1\-regularized extreme value regression approach with unit\-root predictors\.Note:arXiv preprintCited by:[2nd item](https://arxiv.org/html/2607.04184#S4.I2.i2.p1.1)\.
- \[7\]R\. Hasan, B\. Biswas, M\. Samiun, M\. A\. Saleh, M\. Prabha, J\. Akter, F\. H\. Joya, and M\. Abdullah\(2025\)Enhancing malware detection with feature selection and scaling techniques using machine learning models\.Scientific Reports15\(XX\),pp\. XX–XX\.External Links:[Document](https://dx.doi.org/10.1038/s41598-025-93447-x)Cited by:[§III\-C](https://arxiv.org/html/2607.04184#S3.SS3.p1.1)\.
- \[8\]Z\. Huang, H\. Zheng, C\. Li, and C\. Che\(2024\)Application of machine learning\-based k\-means clustering for financial fraud detection\.Academic Journal of Science and Technology10\(1\),pp\. 33–39\.Cited by:[§I](https://arxiv.org/html/2607.04184#S1.p2.1),[§II](https://arxiv.org/html/2607.04184#S2.p1.1)\.
- \[9\]M\. Jakaria, H\. Shikder, N\. M\. Himel, N\. Siddiqui, and M\. M\. Rahman\(2025\)Analyzing stock price volatility: a statistical study of three listed companies on the dhaka stock exchange\.Asian Business Review\.External Links:[Document](https://dx.doi.org/10.18034/abr.v15i1.748)Cited by:[§I](https://arxiv.org/html/2607.04184#S1.p1.1)\.
- \[10\]R\. H\. Khan, D\. F\. Dofadar, and M\. G\. R\. Alam\(2021\)Explainable customer segmentation using k\-means clustering\.InProc\. UEMCON 2021,pp\. 639–643\.Cited by:[§III\-D3](https://arxiv.org/html/2607.04184#S3.SS4.SSS3.p1.1)\.
- \[11\]Y\. Li, S\. Fan, and H\. Wang\(2025\)Machine learning\-based identification of anomalous trading behavior patterns among asia\-pacific investors in u\.s\. securities markets\.Spectrum of Research5\(1\),pp\. XX–XX\.Cited by:[§II](https://arxiv.org/html/2607.04184#S2.p4.1)\.
- \[12\]Y\. Li, N\. Yao, Y\. Huo, and W\. Cai\(2025\)Trust dynamics and bot\-driven responses: an approach to rug pulls in solana meme coin markets\.InProc\. 17th ACM Web Science Conf\. \(WebSci\),External Links:[Document](https://dx.doi.org/10.1145/3717867.3717922)Cited by:[3rd item](https://arxiv.org/html/2607.04184#S4.I2.i3.p1.1)\.
- \[13\]V\. N\. Mandhalaet al\.\(2025\)Comparative analysis of clustering algorithms for financial fraud detection\.International Journal of Safety & Security Engineering15\(4\)\.Cited by:[item 3](https://arxiv.org/html/2607.04184#S1.I1.i3.p1.1)\.
- \[14\]J\. Meng, A\. M\. Abed, M\. G\. Elsehrawy, A\. D\. Al Agha, N\. Abdullah, S\. Elattar, M\. Abbas, H\. Al Garalleh, and H\. Assilzadeh\(2024\)Nano\-integrating green and low\-carbon concepts into ideological and political education in higher education institutions through k\-means clustering\.Heliyon10,pp\. e31244\.External Links:[Document](https://dx.doi.org/10.1016/j.heliyon.2024.e31244)Cited by:[§III\-F](https://arxiv.org/html/2607.04184#S3.SS6.p1.1)\.
- \[15\]G\. Oyewole and G\. Thopil\(2022\)Data clustering: application and trends\.Artificial Intelligence Review56,pp\. 6439–6475\.External Links:[Document](https://dx.doi.org/10.1007/s10462-022-10325-y)Cited by:[§III\-D](https://arxiv.org/html/2607.04184#S3.SS4.p1.1)\.
- \[16\]Y\. Peng, X\. Sun, Y\. Duan, Z\. Fang, and T\. Tang\(2024\)Unsupervised detection of fraudulent transactions in e\-commerce using contrastive learning\.Note:arXiv preprint arXiv:2503\.18841Accessed: 2026\-02\-20External Links:[Link](https://arxiv.org/abs/2503.18841)Cited by:[§II](https://arxiv.org/html/2607.04184#S2.p2.1)\.
- \[17\]B\. Rizvi, A\. Belatreche, A\. Bouridane, and I\. Watson\(2020\)Detection of stock price manipulation using kernel\-based principal component analysis and multivariate density estimation\.IEEE Access8,pp\. 135989–136003\.External Links:[Document](https://dx.doi.org/10.1109/ACCESS.2020.3011590)Cited by:[1st item](https://arxiv.org/html/2607.04184#S4.I2.i1.p1.1)\.
- \[18\]S\. K\. Vangibhurathachhi\(2025\)Machine learning for fraud detection in financial transactions\.International Journal on Science and Technology16\(XX\),pp\. XX–XX\.External Links:[Document](https://dx.doi.org/10.71097/ijsat.v16.i1.3727)Cited by:[§I](https://arxiv.org/html/2607.04184#S1.p2.1)\.
- \[19\]M\. I\. Wahab and F\. Olakkodu\(2025\)Insider trading: an overview in indian and global markets\.Journal of Informatics Education and Research5\(XX\),pp\. XX–XX\.External Links:[Document](https://dx.doi.org/10.52783/jier.v5i2.2661)Cited by:[§I](https://arxiv.org/html/2607.04184#S1.p1.1)\.
- \[20\]W\. Yang, R\. Wang, and B\. Wang\(2020\-12\)Detection of anomaly stock price based on time series deep learning models\.InProc\. 2020 Management Science Informatization and Economic Innovation Development Conf\. \(MSIEID\),pp\. 110–114\.Cited by:[§II](https://arxiv.org/html/2607.04184#S2.p3.1)\.Similar Articles
SilIF: Silhouette-Augmented Isolation Forest for Unsupervised Transaction Fraud Detection
SilIF augments Isolation Forest with a silhouette-based scoring layer on per-tree path length fingerprints, improving unsupervised transaction fraud detection on the IEEE-CIS benchmark by +0.0080 AUC-PR on average.
Enhancing Regime Shift Detection Using Unstructured Data: A Study on the Treasury Market
This paper proposes a text-enhanced pipeline for detecting regime shifts in financial markets, combining LLM analysis of unstructured text with statistical tests on time series data. Applied to the US Treasury market from 2010-2024, the method achieves high accuracy and is detector-agnostic.
Graph-Based Financial Fraud Detection with Calibrated Risk Scoring and Structural Regularization
This paper proposes a graph neural network framework for financial fraud detection that integrates transaction records and identity information into node attributes, employs a multi-layer message passing mechanism, and uses weighted supervision and structural consistency regularization to improve risk scoring and probability calibration. Experiments on a public dataset show the method outperforms existing approaches.
Explainable Artificial Intelligence for Anomaly Detection in Banking Transactions: An Internal Audit Perspective
This paper presents an explainable AI approach for detecting anomalies in banking transactions from an internal audit perspective, addressing interpretability and trust in financial security systems.
SQL patterns I use to catch transaction fraud
A practical guide to six SQL patterns for detecting transaction fraud in financial data, including velocity checks, impossible travel detection, and other methods. The author shares real-world examples and tuning advice.