How would you design a model to detect anomalous transactions in real time for Alloy Holdings customers?