Your question is Real-Time Transaction Anomaly Detection. Take a moment with it on the right.
Talk me through your thinking if you like. When you're confident, submit your answer and I'll grade it like a real screen (7/10 or better passes).
Explain how you would design an anomaly detection system to identify suspicious transaction patterns in real time for Citi. Discuss the end-to-end data and model architecture, real-time scoring, delayed labels, operational response, evaluation, monitoring, and failure modes. Clarify missing scale, latency, compliance, and business requirements before making sizing assumptions.