Sum Aggregation
The Sum aggregation calculates the total value of transaction amounts that meet specific criteria within a defined timeframe. Use it to monitor cumulative spending, detect high-value transaction patterns, or identify fraud based on aggregated totals.
Track total transaction amounts over time.
Detect when total spend exceeds thresholds.
Identify unusually high cumulative spending.
Configuration
Parameter
| Parameter | Description |
|---|---|
| Amount (EUR) | Sum transaction amounts in EUR |
| Amount (USD) | Sum transaction amounts in USD |
Filter (Optional)
Narrow the sum to specific conditions:
- Transaction status (Succeeded, Failed, etc.)
- Merchant name or ID
- Device IP or ID
- Amount thresholds
See Filter Options for full list.
Timeframe
| Timeframe | Values |
|---|---|
| Hour | 1–24 |
| Day | 1–365 |
| Week | 1–52 |
| Month | 1–12 |
| Since Last Challenged | N/A |
| Since Last Frictionless | N/A |
Variable Name
Unique identifier for the variable (e.g., totalSpend24h, totalSpendSinceChallenge).
Using Sum in Rules
totalSpend24h > 1000 → Challenge
totalMerchantSpend24h > 2000 → RejectExamples
Total Spend in 24 Hours
Detect excessive spending.
Type: Sum
Parameter: Amount (EUR)
Filter: Transaction Status = Succeeded
Timeframe: 24 hours
Variable Name: totalSpend24hRule: totalSpend24h > 1000 → Challenge
Total Spend by Device IP
Monitor spending from specific devices.
Type: Sum
Parameter: Amount (EUR)
Filter:
- Transaction Status = Succeeded
- Device IP = Equals to Current
Timeframe: 24 hours
Variable Name: totalSpend24hByIPRule: totalSpend24hByIP > 500 → Challenge
Merchant-Specific Spend
Track total spending at a specific merchant.
Type: Sum
Parameter: Amount (EUR)
Filter:
- Merchant Name = Equals to Current
- Transaction Status = Succeeded
Timeframe: 24 hours
Variable Name: totalMerchantSpend24hRule: totalMerchantSpend24h > 2000 → Challenge
Device-Based Spend
Identify unusual device spending.
Type: Sum
Parameter: Amount (EUR)
Filter:
- Computed Device ID = Equals to Current
- Transaction Status = Succeeded
Timeframe: 24 hours
Variable Name: totalDeviceSpend24hRule: totalDeviceSpend24h > 750 → Challenge
Spend Since Last Challenge
Monitor spending after fraud alert.
Type: Sum
Parameter: Amount (EUR)
Filter: None
Timeframe: Since Last Challenged
Variable Name: totalSpendSinceChallengeRule: totalSpendSinceChallenge > 1500 → Challenge
How It Works
sequenceDiagram
participant Card
participant Aggregation as Aggregation Engine
participant Rule as Conditional Rule
Note over Card,Rule: 4-hour window
Card->>Aggregation: Transaction 1: €100 (10:00)
Aggregation-->>Aggregation: totalSpend4h = €0
Aggregation->>Rule: sum > 500? (No, accept)
Card->>Aggregation: Transaction 2: €200 (10:30)
Aggregation-->>Aggregation: totalSpend4h = €100
Aggregation->>Rule: sum > 500? (No, accept)
Card->>Aggregation: Transaction 5: €300 (13:00)
Aggregation-->>Aggregation: totalSpend4h = €850
Aggregation->>Rule: sum > 500? (Yes, challenge)
The variable reflects the sum of historical transaction amounts in the window.
Getting Started
- Navigate to Risk Profiles → select or create a profile
-
Click + under "User Defined Variables"
-
Select Sum aggregation type
-
Configure Parameter, Filter, Timeframe, and Variable Name
- Use in a Conditional Rule
Related Aggregations
- Count – Count transactions or days
- Average – Mean transaction values
- Standard Deviation – Measure variability
Updated 18 days ago