actually, arguing that fraud filters must be private is interesting. Would you make the same argument about keeping encryption algorithms private? :) The two concepts are similar but not exactly the same. Unlike encryption algorithms, a fraud filter is not bullet proof. It is just an alert mechanism. So, yeah, it probably needs to be kept secret.