coco-financial-fraud

Analyze financial fraud patterns in the CoCo-Financial dataset using SQL queries.

Updated Feb 19, 2026
One-click install
npx skills add https://github.com/evolvconsulting/coco-hol --skill coco-financial-fraud
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: coco-financial-fraud
Source: https://github.com/evolvconsulting/coco-hol/tree/main/lab-01-fraud-analytics/.cortex/skills/coco-financial-fraud
Command: npx skills add https://github.com/evolvconsulting/coco-hol --skill coco-financial-fraud

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps financial institutions detect, investigate, and analyze fraudulent transactions, reducing financial losses and improving security.

Core Features & Use Cases

  • Pattern Analysis: Identify trends and anomalies in transaction data.
  • Transaction Investigation: Deep dive into suspicious activities with contextual data.
  • Risk Assessment: Score customers and merchants based on fraud indicators.
  • Velocity & Geographic Checks: Detect rapid transaction bursts and impossible travel scenarios.
  • Use Case: A fraud analyst can use this skill to quickly investigate a flagged transaction, view the customer's recent activity, check for velocity attacks, and assess geographic anomalies to determine if it's fraudulent.

Quick Start

Use the coco-financial-fraud skill to investigate transaction ID 'txn_12345'.

Frequently Asked Questions about coco-financial-fraud

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I investigate suspicious financial transactions using SQL?

To investigate suspicious financial transactions, you query the CoCo-Financial dataset in Snowflake to identify anomalous patterns, assess risk scores, and review contextual data from customers, accounts, and merchants.

What is velocity analysis in financial fraud detection?

Velocity analysis in financial fraud detection identifies rapid transaction bursts from a single account or customer, flagging suspicious activities where multiple transactions occur in an unusually short timeframe.

Do I need Snowflake access to detect financial fraud patterns?

Yes, you need Snowflake access to detect financial fraud patterns, specifically requiring read access to the TRANSACTIONS, FRAUD_LABELS, CUSTOMERS, ACCOUNTS, MERCHANTS, and ALERTS tables.

How do I detect geographic anomalies in transaction data?

You detect geographic anomalies in transaction data by analyzing customer location patterns to identify impossible travel scenarios, where transactions occur from geographically distant locations within impossible timeframes.

Can I score customer risk based on fraud indicators?

Yes, you can score customer risk based on fraud indicators by analyzing transaction history, velocity attack patterns, and geographic anomalies to assess the overall risk profile of customers and merchants.