Financial Services

American Express Fraud Detection: How AI Screens Billions of Transactions in Two Milliseconds

American Express built an NVIDIA-powered deep learning system that screens billions of card transactions for fraud in roughly two milliseconds apiece.

You’re at the door of a club you’re not sure you’re getting into. There’s a rope, a line, and a bouncer who has maybe half a second to look at you before deciding: wave you through, or step in front of you and ask a question. He’s not reading your ID that closely. He’s not running a background check. He’s pattern-matching against thousands of nights of exactly this scene: the way you’re standing, who you’re with, whether the story you’d tell if he asked would hold together. Most nights he’s right. Some nights he isn’t, and either a genuine problem gets in or a perfectly fine group gets turned away in front of everyone else in line, which is its own kind of damage.

Now swap the rope for a payment network and the bouncer for a piece of software, and you have roughly what happens every time you tap a card. American Express runs that decision on nearly every transaction on its network, worldwide, and it has to make the call in about two milliseconds, fast enough that you never notice it happened at all.

What Problem Was American Express Actually Trying to Solve?

Card fraud is a volume problem before it’s an accuracy problem. Amex’s network handles more than $1.2 trillion in transaction value a year, and by the company’s own account, generates on the order of 8 billion authorization decisions annually. Every one of those has to be scored for fraud risk inside the authorization window, the brief moment between a card being tapped and the terminal saying yes or no, before the model even gets involved in anything downstream like a dispute or a chargeback.

The two failure modes pull in opposite directions. Miss a fraudulent transaction and Amex (or the merchant) eats the loss. Flag a legitimate one and a real customer gets declined buying groceries or paying for a flight, in front of other people, which is exactly the kind of moment that makes someone switch cards. A rules engine tuned to catch more fraud tends to also catch more false positives; loosen it and fraud slips through. That tension, not fraud detection in the abstract, is the actual engineering problem, and it’s why Amex has been investing in this since at least 2010, moving from static rules and a gradient-boosted-tree model toward something that could read a customer’s spending as a sequence rather than a single snapshot.

What Did American Express Build?

According to a case study NVIDIA published on its collaboration with Amex, the current system pairs two model types rather than replacing one with the other. A long-standing gradient boosting machine (GBM) model, the kind of tree-based classifier that’s been an industry workhorse for fraud scoring for years, still does a lot of the heavy lifting. Layered on top is a GPU-accelerated long short-term memory (LSTM) network, a type of recurrent neural net built to recognize patterns across a sequence of events over time, in this case a cardmember’s recent spending history, rather than judging a single transaction in isolation.

The models are trained on NVIDIA DGX systems, compressed and optimized with NVIDIA TensorRT, and served in production through NVIDIA Triton Inference Server, the layer that actually answers the “is this fraud” question at authorization time. NVIDIA’s write-up credits this GPU-accelerated pipeline with a 50x speedup over the prior CPU-based setup, which is what let Amex hit its two-millisecond latency budget at all. Amex has separately described an internal model, sometimes referred to as “Gen X,” that runs more than a thousand decision trees against billions of observations. That’s Amex’s own characterization, not an independently audited benchmark, and it’s worth reading with the same skepticism you’d apply to any vendor calling its own system the largest of its kind.

The bouncer isn’t reading your ID closely. He’s pattern-matching against thousands of nights of exactly this scene.

How Well Does It Actually Work?

The clearest number is the one NVIDIA reports as a joint technical result rather than a marketing claim: combining the LSTM with the existing GBM model improved fraud detection accuracy by up to 6 percent in specific segments, on top of the 50x inference speedup that made real-time scoring possible in the first place. That’s a real, if narrow, engineering result, and it’s corroborated across NVIDIA’s own blog post, its customer case study page, and third-party technical writeups of the same GTC presentation.

Where the picture gets softer is anything about dollars saved or Amex’s fraud rate relative to competitors. You’ll find secondary sources repeating a figure that Amex maintains “the lowest fraud rate in the industry,” roughly half its competitors’, and in my experience that kind of round, favorable comparison, sourced back to the company itself with no methodology attached, is exactly the sort of claim to hold at arm’s length rather than repeat as fact. I could not find an independently audited fraud-rate comparison across card networks to check it against, and Amex doesn’t publish its false-positive or false-decline rate at all, which is the other half of the story worth knowing.

DimensionLegacy rules + tree model (pre-GPU)Current LSTM + GBM on GPU
Inference pathCPU-bound scoringGPU-accelerated via Triton
LatencyMissed the target budget~2ms, within Amex’s SLA
What it seesSingle-transaction snapshotSequence of recent spending behavior
Detection accuracyBaselineUp to 6% higher in flagged segments (vendor-reported)
Scale claimedN/A~$1.2T in annual transaction value, ~8B decisions/year

What Are the Real Limitations Here?

A few things are worth naming plainly. First, most of the specific, quantified numbers in this story, the 50x speedup, the 2ms latency, the 6% accuracy lift, come from NVIDIA’s own case study of its own hardware and software stack. NVIDIA has a direct commercial interest in that story looking good, and while the benchmark itself is technical enough to be credible, it isn’t independent third-party verification. Second, Amex doesn’t publish the metrics that would let an outsider judge the system’s real-world tradeoff between catching fraud and inconveniencing legitimate customers, no disclosed false-decline rate, no audited comparison to competitors. Third, deep learning fraud models are notoriously hard to explain after the fact, and Amex hasn’t published details on how it handles a cardmember disputing a hold that a neural net, not a human, effectively triggered. None of that means the system doesn’t work. It means the parts we can verify (the latency, the architecture, the accuracy delta in that one study) are narrower than the parts that get repeated as if they were verified (the industry-leading fraud rate, the “largest model in the world” framing).

AI Suite and Open-Source Implementation

Amex’s actual stack, as far as it’s been publicly described, is a fairly clean pipeline: transaction data feeds a GBM risk model that’s been in production for years, an LSTM sequence model trained on NVIDIA DGX hardware sits alongside it scoring recent spending behavior, both get compressed with TensorRT for inference speed, and the combined score gets served through Triton Inference Server inside the live authorization path, all bound by a strict millisecond-level SLA. It’s less a single “AI product” than a serving-latency problem solved with a fairly conventional pair of model types.

The good news for anyone without Amex’s transaction volume is that most of that stack has open-source equivalents you can actually use. NVIDIA’s own Financial Fraud Detection Blueprint, built on the open-source RAPIDS data-processing libraries (cuDF, cuML) plus graph neural networks, is published for exactly this use case and runs on standard cloud infrastructure. Triton Inference Server itself is open source under Apache 2.0, so the same serving layer Amex uses is available to anyone. For the modeling side, XGBoost and LightGBM are the open-source GBM libraries that do what Amex’s tree model does, and PyTorch handles LSTM or transformer-based sequence modeling without needing DGX-scale hardware to get started. NVIDIA Morpheus, an open-source framework for GPU-accelerated anomaly and cybersecurity detection, covers some of the same ground for teams that want a more turnkey starting point. For prototyping before touching real transaction data, the IEEE-CIS Fraud Detection dataset and the synthetic PaySim dataset are both public and built for exactly this.

If you’re an enterprise trying to build something in this direction, here’s a practical way to sequence it. First, baseline with an open GBM model like XGBoost on your historical transaction features before reaching for anything resembling deep learning; Amex’s own results suggest the tree model was already carrying most of the accuracy, and the sequence model added a real but incremental gain, not a step change. Second, only add a sequence model like an LSTM where time-ordered behavior genuinely matters, and treat it as an ensemble layered on the GBM rather than a wholesale replacement. Third, solve the latency and serving problem, using something like Triton or ONNX Runtime, before you spend more effort improving raw accuracy, because a fraud score that arrives after the authorization window has closed is worthless no matter how accurate it is. And whatever you build, deploy it in shadow mode first: run it scoring live traffic in parallel with your existing system, without letting it make the actual block or allow decision, for a defined trial period, and compare false-positive and false-negative rates before you ever let it touch a real customer’s transaction. Be honest with yourself about what that shadow test can and can’t tell you, too. No open-source stack replicates years of trillions of dollars in labeled, closed-loop transaction history. The data, not the architecture, is the part of Amex’s advantage that’s genuinely hard to copy.

Q: How does American Express detect credit card fraud with AI?

A: Amex combines a long-standing gradient boosting machine (GBM) model with a GPU-accelerated LSTM neural network that reads a cardmember’s recent spending as a sequence, trained on NVIDIA DGX hardware and served through NVIDIA Triton Inference Server during live card authorization.

Q: How fast is American Express’s AI fraud detection system?

A: NVIDIA’s published case study describes a roughly two-millisecond latency requirement per transaction, met via a GPU-accelerated pipeline that NVIDIA reports as a 50x speedup over the prior CPU-based configuration.

Q: Can other companies use the same AI fraud detection tools as American Express?

A: The individual components are largely open source or commercially available. Triton Inference Server, RAPIDS, XGBoost, LightGBM, and PyTorch replicate most of the architecture; NVIDIA also publishes a Financial Fraud Detection Blueprint built on the same tooling. What’s genuinely hard to replicate is Amex’s scale of labeled historical transaction data.

Further reading:

← All articles