13. Graph Detection

Find coordination while resisting guilt by association.

Reader outcome

Model accounts, devices, payments, networks, transactions, interactions, and messages as a temporal graph with confidence-bearing edges.

Decision questions

• Which edges indicate coordination versus ordinary shared infrastructure?
• How do hub nodes such as VPNs, schools, cafés, and payment processors distort clusters?
• What action is justified on a node because of its neighbors?
• How are stale edges decayed, explained, and contested?

Evidence needed

• Coordinated-abuse and fraud-network research
• Graph evaluation with ground-truth limitations
• Temporal graph and entity-resolution methods
• Collateral enforcement case studies