American Express Company

American Express processes hundreds of billions of dollars in card transactions annually across its global network. Unlike Visa and Mastercard — which operate as payment networks passing liability to issuing banks — American Express issues its own cards and bears direct credit and fraud loss. Fraud detection was traditionally a rules-based system: transactions were flagged if they matched patterns such as unusual geographies, atypical merchant categories, or transactions exceeding spending thresholds. Rules-based systems created two problems simultaneously: high false positive rates (legitimate transactions declined, causing cardholder frustration) and false negative rates (sophisticated fraud patterns evading static rule sets). By the mid-2010s, credit card fraud in the U.S. industry was running at approximately 12–13 cents per $100 of transactions, representing billions in annual losses across the sector.

American Express invested heavily in machine learning-based fraud detection over the 2012–2018 period as a core competitive differentiator:

• Real-time ML scoring: Replaced the primary rules engine with a machine learning model that scores every transaction in real time (typically within 2 milliseconds) using over 100 data signals — merchant category, transaction velocity, cardholder purchase history, device fingerprint, location data, and behavioral patterns.
• Proprietary training data advantage: Because Amex operates a closed-loop network (issuing cards AND operating the network AND often acquiring merchants), it has access to full transaction data on both the cardholder and merchant side — a data advantage unavailable to open-loop networks. This allowed models to train on the complete transaction context.
• False positive reduction workflow: Built a secondary review workflow using ML to reduce false positives — transactions scored as potentially fraudulent were further evaluated before generating a decline, reducing cardholder friction.
• Continuous model retraining: Models are retrained on rolling data windows to detect evolving fraud patterns, rather than relying on static rule sets that criminals could reverse-engineer.