Skip to Content
Technical Articles
Author's profile photo Jon Gooding

SAP Fraud Management 1.1 SP5 – Online Detection

SAP Fraud Management provides Mass Dection (across all data stored) and Online Detection (for realtime specific transations) running through the Fraud Management Detection process.


In online fraud detection, an external application calls SAP Fraud Management via a Web service. In practice, this means that you have integrated a call to SAP Fraud Management for online detection into a business process in the external application.


For example, an Organization wants to avoid Fraud in its purchases and payments even before they happen-: SAP Fraud Management provides ONLINE detection feature which exactly fits the requirement. SAP ACS comes with certain rules which can be implemented based on the requirement and avoids fraud from happening in the first case. This means that SAP Fraud Management can be integrated into your business processes on a “while you wait” basis, without disrupting the business process flow.


In addition to the standard Duplicate Invoice Scenario (provided in the example below), the real value is where you can combine multiple detection methods to provide advanced detection across vendors. As part of this detection we could also perform realtime checks on additional criteria of the vendor – such as Country is in a high risk region or purchase order / invoice differences across previous payments. This will assist in providing a stronger calibration of detection methods to ensure that the Investigators are spending their time on valid Compliance issues not False Positives.

—— Below is the real time scenario of ONLINE detection for detecting fraud in PO’s and blocking payment ——–

Condition:  Block payment for a duplicate Invoice with same amount.


Phase 1 – On ECC System

  1. Create a Purchase Order (ME21N)
  2. Raise Good Receipt for the above PO (MIGO)
  3. Raise Vendor Invoice (MIRO) for the same



Input ‘Amount’ and SIMULATE & POST


Phase 2 – Create Duplicate Invoice for Same Purchase Order




Now we have created a “Duplicate Invoice”

Phase 3 – Verify ALERT on the Fraud Console

Launch Fraud Management Console of SAP Fraud System




Open “All Alerts”

Aviary Photo_130662904234746158.png

Opening specific Alert

Aviary Photo_130662905877676556.png

Navigating from SAP Fraud Management Application directly into SAP ECC:

We can see the payment block for the VENDOR

Aviary Photo_130662907573036926.pngAviary Photo_130662908415556936.png

Closing the ALERT and Releasing the VENDOR

Aviary Photo_130662913274488923.png

Entering extra details to help with the Detection Strategy Calibration:

Aviary Photo_130662910569108736.png

Saving and Closing the Alert, provides the following Vendor information (Vendor Block is cleared):

Aviary Photo_130662915708926446.png

Allowing the Vendor to be paid. Thus completing an Online detection Alert process for an individual Vendor.

Recogition also to Rv for bringing this together technically.

The next blog will cover how this was done technically.

Assigned Tags

      You must be Logged on to comment or reply to a post.
      Author's profile photo Toufik BENAISSA
      Toufik BENAISSA


      Very interesting post !

      I would like to integrate also Online detection methods and I am looking for technical details on how to complete this task.

      "The next blog will cover how this was done technically." I did not find it, did you document the technical integration of Online detection ?

      thank you for your help !




      Author's profile photo Jon Gooding
      Jon Gooding
      Blog Post Author

      Hi Toufik,

      You are correct - It never got posted on here.

      Send me your email address, and I'll post you what we wrote up.



      Author's profile photo Sunny Ponnar
      Sunny Ponnar

      Hello Jon,

      This is a great post! I would like to understand the technical aspects of this integration.

      Please email me a copy of the document.

      My email:




      Author's profile photo Jon Gooding
      Jon Gooding
      Blog Post Author

      Hi Sunny,

      Sorry for the delay. I have sent you an email.


      Author's profile photo Abhinav Jindal
      Abhinav Jindal

      Hi Jon,

      Hope you're doing good. I've worked on the mass-detection aspect of fraud detection for BIS; but have struggled to find literature to help support an online detection scenario. Can you please assist me with the technical aspects of the same; involving config(Customizing) and/or info on respective HANA views and procedures?

      You could email me at


      Thanks in advance for your help.



      Abhinav Jindal




      Author's profile photo Jon Gooding
      Jon Gooding
      Blog Post Author

      Hi Abhinav,

      I am not shipping this doc as it's pretty old now. SAP has demos of this - as part of our demo solutions - can you reach out to your local SAP contacts to organise a detailed demo / showcase of the configuration etc.

      Hope that helps


      Author's profile photo Md Aamir
      Md Aamir

      Hi Jon,


      In ACS 1.3 online detection is based on generic input table instead of earlier Fixed Structure input. Can you please share some documents on how to implement and configure online detection. I would be of great help to me. I have already done one BIS implementation but was not able to configure this unique functionality of online detection.


      Will reach out to you on Linked for further communication



      Md Aamir