Where they were before
The lender had a fraud model running from day one, bought off the shelf and tuned on a generic dataset from the vendor's other clients. It worked, in the sense that it caught fraud. It also caught an enormous number of transactions that were not fraud at all.
Every flagged transaction went to the risk team for manual review, and the team was drowning in cases that turned out to be a customer buying something unusual, not a criminal. Legitimate customers were getting declined or locked out of their own accounts while the team worked through the backlog.
The model itself was a black box from the lender's side. Nobody on the team could say exactly why a given transaction had been flagged, only that a score had crossed a threshold. That made it hard to improve and impossible to explain when a customer or a regulator asked why.
Two things were happening at once. The false-positive rate was a customer experience problem, and the lack of explanation was a compliance risk waiting to become a real one.
The problem
A digital lender's fraud model was tuned on a generic dataset and flagged legitimate transactions almost as often as real fraud, frustrating customers and burying the risk team in manual review.
Why this is harder than it looks
A fraud model is judged on a trade-off, not a single number. Catch more fraud and you generally also catch more legitimate transactions. Loosen the model and real fraud slips through. The lender needed to move that curve, not just pick a different point on the same one.
The data made it harder. The lender's own transaction patterns, the kinds of purchases their specific customers made, the seasonal and regional quirks of their business, none of that was reflected in a model trained on someone else's aggregate data.
And a wrong decision here is not abstract. A declined legitimate transaction is a customer who might not come back. A missed fraud case is a direct loss. Both failure modes had a real cost, and the model had to be judged against both at once.
How we approached it
We retrained the fraud model from the lender's own transaction history rather than starting from the vendor's generic baseline. That meant the model's sense of what normal looks like was actually built from this lender's customers, not an average across many different businesses.
Explainability was designed in from the start, not added as a report afterward. Every flag carries the specific factors that produced it: which features contributed, how much each one weighed, and what the decision boundary looked like for that case. That output goes straight into the review screen the risk team already uses.
We rolled the new model out gradually, running it alongside the existing one and comparing flags before it took over the queue on its own. That let the team see exactly how the false-positive rate was moving before they trusted it with the full volume.
What we built
A fraud detection model retrained on the lender's own transaction history, with explainable risk scores that trace every flag back to the specific factors that triggered it, built for the compliance team's actual review workflow.
How we knew it was working
The number to move was the false-positive rate, agreed with the risk team before any of it was built.
Fraud caught could not be allowed to slip in the process, so that was watched at the same time, not traded away for a better false-positive number. A model that lets more fraud through to clear the queue faster is not an improvement, it is a different problem.
Review time per case was tracked too, because it is the number that told the risk team whether the explanation feature was actually being used or just sitting on the screen unread.
What changed
False-positive flags dropped 52%, review time per case fell by more than half, and the risk team could finally explain a decision to a regulator in one screen instead of a week of digging.
Where it stands now
False-positive flags dropped 52%, and the risk team's queue shrank enough that reviews happen same-day instead of backing up for a week.
The explanation attached to every flag changed how the compliance conversation goes. A decision used to take a person half a day to reconstruct from raw logs. It now takes one screen.
Fraud caught held steady through the change, which was the condition the whole project was judged against.
If you are in the same position
If your fraud model came from a vendor and was tuned on somebody else's data, expect it to be miscalibrated for your actual customers in ways that show up as false positives, not missed fraud. Missed fraud is what people worry about. False positives are usually the bigger cost sitting quietly in a review queue nobody is measuring against customer experience.
Explainability is not a nice-to-have you add once the model works. Build it into the pipeline from the start, because retrofitting an explanation onto a model that was never designed to produce one is close to starting over.
And watch both sides of the trade-off at once. A model that halves your false positives while quietly letting more fraud through has not actually improved anything. Judge the change against both numbers or you will not know which one moved.

