-- detect multiple auths in a short window and | |
-- send to lock account topic/microservice | |
SELECT card, | |
MAX(amount) as theamount, | |
TUMBLE_END(eventTimestamp, interval '5' minute) as ts | |
FROM payments | |
WHERE lat IS NOT NULL | |
AND lon IS NOT NULL | |
GROUP BY card, TUMBLE(eventTimestamp, interval '5' minute) | |
HAVING COUNT(*) > 4 -- >4==fraud |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment