Which attributes to consider for credit card fraud detection on an ATM?
Location based trends
Number of transactions from a particular ATM in a particular location, compared to the home area. So if the user usually uses a small set of ATMs near to their address, and then suddenly there are 5 large transactions from an ATM on the other side of the country.
Another little suggestion
If it was up to me, I would use a system where the attempted transaction is given a suspiciousness rating, where each factor is given a score and then the overall decision whether or not to authorize the transaction is based on the average score. This would also allow you to prioritize different factors.
Does that make sense? (Sorry, it's my first post, I'm still getting used to the etiquette)