Stopping fraud rings with link analysis software

With almost half of all reported crimes in the UK being fraud or cybercrime, the costs to business continue to challenge the bottom line, with organised crime posing continuous and sustained attacks across sectors.

How can organisations keep a step ahead and proactively prevent organised fraud whilst also understanding what ‘good customers’ look like?

This paper unpacks the challenge, takes a 360 view of fraud and explores how advanced network investigation technology can offer solutions.

As more businesses use websites, social media, cloud based services and hold more personal data electronically than ever before, high profile online data thefts continue to rise.

Per year fraud losses in the UK are around £193 billion

Synectics Solutions work across a range of sectors including financial and insurance, on a national and global scale. Their SIRA product not only provides tailored insights to the individual company, but the National SIRA database exists to share intelligence amongst their clients to help tackle financial fraud. Research conducted by Synectics Solutions suggests that in some sectors, organised fraud activity affects as much as 59% of all fraud filings to the National SIRA database 2017.

Organised fraud activity affects as much as 59% of all fraud filings

Identifying this type of attack and differentiating it from the more opportunistic fraud attempts that organisations are already exposed to on a daily basis is challenging.

Fewer organisations are accepting this as just a cost of doing business, particularly in increasingly demanding and competitive environments. Actively targeting organised fraud is a key route to protecting both business and customer assets. Best-in-class fraud prevention and detection systems can help increase market share as well as lead to innovative products and services being offered to customers. Indeed, the cost of preventing fraud at application is far less than the cost of recouping losses once the application proceeds and there are significant benefits to application data where local and syndicated fraud databases can help match and inform insights across other providers.

"...two-thirds of big UK businesses have been hit by a cyber-attack in the past year"

Traditionally, fraud systems identify incidents in a linear way, which inhouse investigators then explore and where possible connect with other cases. However, with more opportunistic and more comprehensive organised crime groups on the attack, a 360 view of fraud has been used to develop specific fraud products at Synectics Solutions.

Orion is an advanced network investigation technology developed by Synectics Solutions in response to the growing rate and complexities of organised fraud faced by organisations. It offers a deeper view of potentially fraudulent and connected accounts, applied specifically to each individual businesses’ needs both reactively and proactively, to identify instances of organised fraud.

" visualisation software has become a standard method for explaining and understanding complex stories...”

This 360o view of data can help to show direct and indirect links between items, people and locations and the patterns, trends and behaviours that emerge. Not only can this identify organised crime networks, it can improve reaction times, operational flexibility, prevent losses and identify weaknesses or gaps in policies, processes or systems.

Each year there is over £24 billion of fraud under investigation within Orion networks

Orion is able to integrate a wealth of data, both within a company and through other systems, including Synectics Solutions’ SIRA system. This allows a richer picture from in and around an organisation and across the sector. The systems’ visualisation and analysis functionality make it possible to easily identify existing and emerging suspicious network activity.

Orion can be either fully integrated with Synectics Solutions’ SIRA system to provide an enterprise wide financial crime prevention solution, or deployed as a standalone network analysis and visualisation system capable of analysing and integrating with any third-party database.

"This 360-view of data can help to show direct and indirect links between items, people and locations and the patterns, trends and behaviours that emerge.”


An uplift in applications being prevented within the same geographic area sparked an investigation by a leading UK Mortgage Lender, using Orion to identify a number of conveyancing solicitors nominated on a large number of applications with a common profile in the same area.

STEP 1: Using propensity scoring within Orion, the Lenders’ fraud investigation could focus on five conveyancing firms, where a number of inconsistencies appeared.

STEP 2: An ‘unauthorised’ and unregulated mortgage broker was identified as the source of the fraudulent applications, using false information and manufactured income streams.

STEP 3: Properties were being used as unauthorised ‘Buy to Let’ investment properties, housing multiple occupants, who were new to the country.

STEP 4: The Lender put measures in place to monitor the property portfolio to ensure swift enforcement was taken and any future losses mitigated.

STEP 5: Retrospective action against the conveyancer was taken to prevent further applications.



Using Orion’s automated capabilities, one of the UK’s leading Building Societies was able to identify and stop an organised crime group from causing serious losses to the society and therefore protecting their members in the process.

STEP 1: Strategy and scorecard in place identified an application which linked to others from the same address, on further investigation other links such as mobile number were made to other applications.

STEP 2: Early applications had turned into live accounts, both subject to payment terminal fraud. Preventative action against the other connected accounts identified within Orion could be made before further losses were incurred.



One of the UK’s largest Retail Banks was able to identify a suspicious pattern of applications being keyed within several of its branches over a 12-month period, working from a tip-off and by using configurable validation criteria available within Orion.

STEP 1: Timeline analysis identified the pattern of fraud, members of staff involved and the person connecting them, moving between branches during their working day.

STEP 2: Orion analysis and evidence helped the bank’s internal fraud team obtain confessions.

STEP 3: Links to an organised crime gang were made and they were identified through CCTV footage, and the Police were able to affect an arrest which led to them finding an ‘ID Factory’.



A leading UK Motor Insurance company used Orion to investigate a motor accident claim, which it uncovered to be a highly organised staged accident fraud ring worth over £50,000.

STEP 1: Orion searched direct customer links using standard validation criteria from the originating accident. It linked 130 accidental policies, only 26 were known to the insurer as being fraudulently incepted.

STEP 2: Policies worth £50,000 were identified as still being ‘on book’. The Insurer took remediating action and data was passed to the claims investigation team.

STEP 3: Orion helped to identify the organised crime group and help the Insurer put a stop to additional false claims being paid out.


If you are interested in finding out more about how Orion can be used in your organisation to help prevent, detect and investigate organised crime groups, call 01782 664000 or email

Further information on Synectics Solutions and how its product offering can benefit your business can be found here.

Time to connect