Computer scientists uncover online auction fraud

Computer scientists at Carnegie Mellon University are using data mining techniques to identify perpetrators of fraud among online auction users as well as their otherwise unknown accomplices.

The new method analyzes publicly available histories of transactions posted by online auction sites such as eBay and identifies suspicious online behaviors and dubious associations among users.

Online auction sites are immensely popular. The largest, eBay, reported third quarter revenues of $1.449 billion, up 31 percent from the previous year, and registered 212 million users, up 26 percent. But the popularity of online auction sites also makes them a target for crooks. Internet auction fraud, such as failure to deliver goods after a sale, accounted for almost two-thirds of the 97,000 complaints referred to law enforcement agencies last year by the federal Internet Crime Complaint Center.

Perpetrators of these frauds have distinctive online behaviors that cause them to be readily purged from an online auction site, said Computer Science Professor Christos Faloutsos. The software developed by his research team — Network Detection via Propagation of Beliefs, or NetProbe — could prevent future frauds by identifying their accomplices, who can lurk on a site indefinitely and enable new generations of fraudsters.

In a test analysis of about one million transactions between almost 66,000 eBay users, NetProbe correctly detected 10 previously identified perpetrators, as well as more than a dozen probable fraudsters and several dozen apparent accomplices.

"To the best of our knowledge, this is the first work that uses a systematic approach to analyze and detect electronic auction frauds," said Faloutsos, who noted that NetProbe could eventually be useful for both law enforcement and security personnel of online sites.

The researchers have already adapted the software to provide a trustworthiness score for individual user IDs. Though not yet available to the public, the NetProbe score would complement user reputation scores that many auction sites already provide to help prevent fraud.

"We want to help people detect potential fraud before the fraud occurs," said research associate Duen Horng "Polo" Chau, who developed NetProbe with Faloutsos, undergraduate student Samuel Wang and graduate student Shashank Pandit.

Many auction sites try to avert fraud with so-called reputation systems. In eBay's case, buyers can report whether they had a positive, neutral or negative experience in a transaction, and that report is then translated into a feedback score for that seller.

Unfortunately, a crook can manipulate these feedback scores, obtaining a favorable score by engaging in a number of legitimate sales. But that is costly and time-consuming and, once the fraudster starts cheating buyers, that user identification is quickly red-flagged and shut down.

Perpetrating frauds may be sustainable, however, if a fraudster has accomplices or sets up separate user IDs to serve as accomplices. These accomplice accounts conduct legitimate transactions and maintain good reputations. They also have many transactions with the user IDs of fraudsters, using their good reputations to boost the fraudsters' feedback scores. Because accomplices don't perpetrate frauds, they usually escape notice and can keep working to establish new fraudster accounts, Faloutsos said.

But an unnatural pattern becomes evident when the transactions are plotted as a graph, with each user represented as a node, or dot, and transactions between individual users represented by lines connecting the nodes.

In the resulting graph, transactions between accomplices and fraudsters create a pattern that sticks out like "a guiding light," Chau said. Graph theorists call this pattern a "bipartite core" — members of one group have lots of transactions with members of a second group, but don't have transactions with members of their own group. One group, the accomplices, also deals with honest eBay users, but most of the transactions are with fraudster groups.

The researchers tested their method, in part, by accumulating transaction histories from eBay and demonstrating that they could detect the distinctive fraud patterns within these massive data sets. Chau reported on an analysis involving about 100 eBay users at a September data mining conference in Berlin. The team has since analyzed about a million transactions between almost 66,000 eBay users, and those as-yet unpublished findings have been submitted for presentation at an upcoming scientific conference.

"Crooks are extremely ingenious," Faloutsos warned, so identifying accomplices would not eliminate all online auction fraud. But eliminating accomplices would force crooks to resort to more sophisticated, complex schemes. "These schemes will require more effort and cost, so fraud would be increasingly unprofitable," he added.

Source: Carnegie Mellon University

Related stories:

Sellers squawk as eBay evolves to combat rivals
Flocks of eBay sellers were squawking as the pioneering online auction website continued "bold changes" aimed at wrenching market share from Internet retail giant Amazon.
Some eBay sellers frustrated with rule changes
(AP) -- Some people who sell things on eBay are fed up with new rules the company has been imposing in hopes of making the auction site more attractive to online shoppers. Now even more changes are coming in the next few weeks, but this time eBay Inc. hopes it can cool tempers.
Stock exchange for 'grid' computing?
You might soon be selling your spare computer power over the internet, or perhaps buying in extra resources to solve a tricky problem. In either case, network administration used to be a stumbling block – until European researchers developed a successful free-market approach to grid computing.
Online Shoppers Trust Reputations of Sellers More at Amazon Than at eBay: Study
The right feedback design can be critical to the long-term success of online marketplaces and auction sites, and they can also help consumers become better shoppers, according to a study from the Sauder School of Business at the University of British Columbia.
Symantec Cracks Down on Piracy
Symantec's decision to file lawsuits against eight companies it accuses of selling pirated software was the latest move in the industry's continuing struggle against counterfeit products. That it was a top-tier security software provider also highlights the dangers to users who install pirated security products onto their systems.
IRS Leans On Auction Sites to Spill Customer Information
Language in the President Bush's budget requires that online auction houses such as eBay share personal data with the IRS. Privacy groups cry foul, saying this will only increase data theft and phishing scams.
Will Next Killer App Be Mobile?
What is the next killer application? This is one of those perennial questions whose answer often seems obvious in retrospect but was not visible when you peered into the crystal ball.
Some eBay Users Abuse Auction Site's Feedback System, Professor Finds
Some eBay users are artificially boosting their reputations by buying and selling feedback on the Internet auction site, according to John Morgan, a professor at the University of California, Berkeley's Haas School of Business.

News discussion:

Technology news