Sum Aggregation

The Sum aggregation calculates the total value of transaction amounts that meet specific criteria within a defined timeframe. Use it to monitor cumulative spending, detect high-value transaction patterns, or identify fraud based on aggregated totals.

Cumulative Spending

Track total transaction amounts over time.

Spending Limits

Detect when total spend exceeds thresholds.

Fraud Detection

Identify unusually high cumulative spending.


Configuration

Parameter
ParameterDescription
Amount (EUR)Sum transaction amounts in EUR
Amount (USD)Sum transaction amounts in USD
Filter (Optional)

Narrow the sum to specific conditions:

  • Transaction status (Succeeded, Failed, etc.)
  • Merchant name or ID
  • Device IP or ID
  • Amount thresholds

See Filter Options for full list.

Timeframe
TimeframeValues
Hour1–24
Day1–365
Week1–52
Month1–12
Since Last ChallengedN/A
Since Last FrictionlessN/A
Variable Name

Unique identifier for the variable (e.g., totalSpend24h, totalSpendSinceChallenge).


Using Sum in Rules

totalSpend24h > 1000 → Challenge
totalMerchantSpend24h > 2000 → Reject

Examples

Total Spend in 24 Hours

Detect excessive spending.

Type: Sum
Parameter: Amount (EUR)
Filter: Transaction Status = Succeeded
Timeframe: 24 hours
Variable Name: totalSpend24h

Rule: totalSpend24h > 1000 → Challenge

Total Spend by Device IP

Monitor spending from specific devices.

Type: Sum
Parameter: Amount (EUR)
Filter:
  - Transaction Status = Succeeded
  - Device IP = Equals to Current
Timeframe: 24 hours
Variable Name: totalSpend24hByIP

Rule: totalSpend24hByIP > 500 → Challenge

Merchant-Specific Spend

Track total spending at a specific merchant.

Type: Sum
Parameter: Amount (EUR)
Filter:
  - Merchant Name = Equals to Current
  - Transaction Status = Succeeded
Timeframe: 24 hours
Variable Name: totalMerchantSpend24h

Rule: totalMerchantSpend24h > 2000 → Challenge

Device-Based Spend

Identify unusual device spending.

Type: Sum
Parameter: Amount (EUR)
Filter:
  - Computed Device ID = Equals to Current
  - Transaction Status = Succeeded
Timeframe: 24 hours
Variable Name: totalDeviceSpend24h

Rule: totalDeviceSpend24h > 750 → Challenge

Spend Since Last Challenge

Monitor spending after fraud alert.

Type: Sum
Parameter: Amount (EUR)
Filter: None
Timeframe: Since Last Challenged
Variable Name: totalSpendSinceChallenge

Rule: totalSpendSinceChallenge > 1500 → Challenge


How It Works

sequenceDiagram
    participant Card
    participant Aggregation as Aggregation Engine
    participant Rule as Conditional Rule

    Note over Card,Rule: 4-hour window

    Card->>Aggregation: Transaction 1: €100 (10:00)
    Aggregation-->>Aggregation: totalSpend4h = €0
    Aggregation->>Rule: sum > 500? (No, accept)

    Card->>Aggregation: Transaction 2: €200 (10:30)
    Aggregation-->>Aggregation: totalSpend4h = €100
    Aggregation->>Rule: sum > 500? (No, accept)

    Card->>Aggregation: Transaction 5: €300 (13:00)
    Aggregation-->>Aggregation: totalSpend4h = €850
    Aggregation->>Rule: sum > 500? (Yes, challenge)

The variable reflects the sum of historical transaction amounts in the window.


Getting Started

  1. Navigate to Risk Profiles → select or create a profile
Risk Profile
  1. Click + under "User Defined Variables"

  2. Select Sum aggregation type

  3. Configure Parameter, Filter, Timeframe, and Variable Name

Sum Variable
  1. Use in a Conditional Rule
Risk Rule

Related Aggregations