Analyzing merchant transaction histories requires dynamic temporal filtering, entity resolution, and aggregation over irregular event streams--operations poorly captured by static tabular or time-series forecasting benchmarks. We introduce TxnQA, an analytical QA benchmark comprising 27 task families (81 templates) alongside a 5-scenario fraud-risk reasoning suite that evaluates both verdicts and supporting evidence over synthetic, privacy-mitigated transaction data. Ground-truth answers are computed programmatically, and model performance is decomposed into format-following rate (FFR), conditional content accuracy (CA), and end-to-end correctness (E2E). Evaluating prompted proprietary baselines and six LoRA-adapted open-weight models shows that adaptation reliably enforces output schemas but leaves arithmetic bottlenecks: Gemma-4-31B-IT and Qwen3-8B attain E2E scores of 0.867 and 0.816, whereas evaluated MoE checkpoints reach only 0.632-0.713. Furthermore, on the 500-instance fraud suite, verdict accuracy frequently exceeds 80%, yet joint accuracy (requiring exact evidence attribution) collapses to at most ~23%. These findings identify schema compliance, semantic calculation, and evidence attribution as three distinct bottlenecks in transaction-sequence QA.
Figures & tables
Figure 1: Overview of the TxnQA benchmark framework. Starting from real merchant transaction data, we generate privacy-mitigated synthetic merchant profiles and irregular transaction sequences using REaLTabFormer. Each transaction sequence is converted into natural-language context and paired with automatically generated question-answer pairs. The resulting benchmark is used to evaluate multiple open-weight large language models under both base (zero-shot) and LoRA supervised fine-tuning settings. Model performance is assessed using three complementary metrics together with fine-grained analyses across question categories, answer formats, and model architectures.
Split
Users
Items
Use
Train
30,000
–
LoRA SFT
Validation
6,500
–
Model selection
Test – General QA
160
162
Main analytical results
Test – Fraud QA
500
500
Fraud-evidence results
Table 1: Dataset populations used in the evaluation.
Proprietary model
Reasoning
Precise QA
Categorical QA
FFR
CA (strict)
E2E (approx.)
FFR
CA (match)
Claude Sonnet
Thinking-on
97.5 ± 1.1
85.0 ± 0.5
82.9 ± 1.1
99.1 ± 1.6
74.8 ± 0.4
Claude Sonnet
Thinking-off
85.1 ± 1.5
85.1 ± 2.3
72.4 ± 2.3
97.2 ± 0.0
70.5 ± 1.6
GPT-5.2
High
87.3 ± 0.5
88.7 ± 0.6
77.4 ± 0.7
95.4 ± 1.6
73.8 ± 3.0
GPT-5.2
None
89.8 ± 0.5
76.3 ± 2.5
68.5 ± 2.3
88.9 ± 2.8
70.8 ± 2.0
Gemini 2.5 Pro
High
91.4 ± 1.6
81.2 ± 0.3
74.2 ± 1.3
91.7 ± 0.0
63.6 ± 3.0
Table 2: Zero-shot performance of proprietary models, percentages with SD across 3 decoding seeds. E2E is approximated as μFFR×μCA/100 ; SD via delta-method approximation. Bold indicates top value per column.
Fine-tuned checkpoint
Precise QA
Categorical QA
Decline Acc.
FFR
CA (strict)
E2E (approx.)
FFR
CA (match)
DeepSeek-R1-Distill-7B
100.0 ± 0.0
79.0 ± 2.5
79.0 ± 2.5
100.0 ± 0.0
91.7 ± 2.8
100.0
Qwen3-8B
100.0 ± 0.0
81.6 ± 2.4
81.6 ± 2.4
100.0 ± 0.0
91.7 ± 2.8
100.0
Qwen3-30B-A3B-Instruct-2507
99.0 ± 0.0
72.1 ± 1.0
71.3 ± 1.0
100.0 ± 0.0
88.0 ± 1.6
100.0
Qwen3-30B-A3B-Thinking-2507
100.0 ± 0.0
63.2 ± 1.1
63.2 ± 1.1
100.0 ± 0.0
76.9 ± 3.2
100.0
Qwen3-32B
100.0 ± 0.0
82.5 ± 3.1
82.5 ± 3.1
100.0 ± 0.0
89.8 ± 1.6
100.0
Table 3: Fine-tuned performance on the General QA precise- and categorical-answer splits. E2E approximated as in Table 2 . † ChatTS evaluated with a single deterministic run.
Protocol
Checkpoint
Base FFR
Tuned FFR
Δ FFR
Base E2E
Tuned E2E
Δ E2E
Matched non-thinking
Qwen3-8B
0.981 ± 0.00
1.000 ± 0.00
+0.019
0.505 ± 0.02
0.816 ± 0.02
+0.311
Gemma-4-31B-IT
0.956 ± 0.01
1.000 ± 0.00
+0.044
0.711 ± 0.01
0.867 ± 0.03
+0.156
Qwen3-32B
0.978 ± 0.01
1.000 ± 0.00
+0.022
0.555 ± 0.03
0.825 ± 0.03
+0.270
Qwen3-30B-A3B-Instruct
0.959 ± 0.01
0.990 ± 0.00
+0.031
0.581 ± 0.01
0.713 ± 0.01
+0.132
Native-thinking
DeepSeek-R1-Distill-7B
0.749 ± 0.02
1.000 ± 0.00
+0.251
0.546 ± 0.03
0.790 ± 0.03
+0.244
Qwen3-30B-A3B-Thinking
0.956 ± 0.02
1.000 ± 0.00
+0.044
0.855 ± 0.02
0.632 ± 0.01
− 0.223
Table 4: Base-to-tuned changes. Native-thinking deltas use a larger generation budget.
Model
Precise QA (%)
Evidence Quality
FFR
Verdict Acc.
Joint Acc.
Rec. (%)
Prec. (%)
Over-citation
GPT-5 (thinking on)
100.0±0.0
80.9±1.2
22.4±0.6
58.2±0.9
34.0±0.6
1.77±0.05
GPT-5 (thinking off)
100.0±0.0
81.4±0.4
0.9±0.3
74.2±1.4
34.5±0.4
2.38±0.01
GPT-5 mini (thinking on)
100.0±0.0
82.5±0.6
15.4±0.2
66.3±1.2
34.7±0.2
1.83±0.04
GPT-5 mini (thinking off)
100.0±0.0
87.7±1.0
1.0±0.4
85.6±0.2
34.4±0.3
2.75±0.01
Claude Opus 4.6 (thinking on)
100.0±0.0
71.7±0.3
16.5±0.2
62.8±0.4
28.8±0.3
2.28±0.01
Table 5: FraudQA performance of proprietary models (zero-shot), mean ± SD over 3 seeds. Left: answer-level accuracy over all rows ( Precise QA ). Right: Evidence Quality conditioned on the evidence-incorrect population ( P=G ). Bold indicates best per column.
Model
SQL
Direct
Direct, 32k
Answering without reasoning
Qwen3-8B
78.7
50.6
–
Qwen3-32B
76.7
55.6
–
Qwen3-30B-A3B-Instruct
87.6
59.1
–
Answering with reasoning
Qwen3-30B-A3B-Thinking
87.9
77.4
84.9
Table 6: End-to-end accuracy (E2E, %) on the expanded 71-type test set (426 questions). SQL: the model queries a database containing the same records. Direct: protocol with default 8,192-token budget, or 32,000 tokens for reasoning models. Values are means over 3 seeds.
Appendix figures & tables5 assets
Supplementary material from the paper’s appendix.
Appendix
Type
Variant 1
Variant 2
Variant 3
1. merchant category
What category does this merchant operate in?
How would you classify this merchant’s business?
What kind of goods or services does this merchant sell?
2. merchant country
Where is this merchant based?
What country does this merchant operate from?
In which country is this merchant located?
3. busiest day
On which weekday is this merchant most active?
What’s the peak day of the week for transactions?
Which day sees the highest transaction volume?
4. busiest time of day
When during the day is this merchant busiest?
Which time of day sees the most activity?
What part of the day has peak volume?
5. merchant age
How old is this merchant’s account?
How long has this merchant been operating?
When was this merchant first established?
6. transaction count
What’s this merchant’s total transaction count?
How many payments has this merchant processed?
What’s the overall transaction volume?
Appendix
Table 7: 27 analytical question types, 3 wording variants each. † Not answerable from rendered text alone; gold label is unknown .
Type(s)
Regime
Example format instruction
1–4, 20–22
categorical
Category / country / day-code / part-of-day / clock-hour / ISO or prose date
5, 6–9, 13–19, 23, 26–27
precise
Exact count, ratio, coefficient of variation, or interval, per type
10–12, 15
precise
Exact dollar amount, full digits or K/M-suffixed
24, 25
precise
Exact age (years/months/days) or country count
Appendix
Table 8: 43 answer-format variants across the 27 question types (condensed), spanning precise and categorical regimes.
Table 11: SQL baseline and direct answers on the expanded 71-type test set, all metrics (%, mean ± SD over 3 seeds). E2E and FFR are over 367 answerable questions; CA is over format-valid answers; decline accuracy is over 59 questions whose gold is unknown .
Merchant information extraction turns noisy financial transaction descriptors into structured fields at production scale. Our deployed LoRA-fine-tuned LLaMA3.1-8B reaches 96.95% F1, but its memory and throughput motivate smaller replacements. We evaluate 23 retained fine-tuning runs plus a separately trained production reference, spanning Gemma3 (270M--4B), Qwen3.5 (0.8B--4B), Aya3.35B, and LLaMA3.1-8B across LoRA ranks, prompts, training templates, and serving environments. A rank-8 LLaMA fine-tune reaches 96.75% F1, only 0.20 points below the rank-32 production reference. Qwen3.54B with JSON-Only prompting reaches 96.60% F1 and strict record-level exact match of 91.67%, with a 3.8× lower inverse-throughput time estimate than the rank-8 8B model. Qwen3.5~0.8B reaches 94.75% F1, and Qwen Think and Nothink templates differ by less than 0.004 F1. Across 14 Databricks endpoints, mean F1 change from local evaluation is −0.0081; Aya is the only family with a 2.7--5.1 point decline. These results show that compact fine-tuned models can preserve most extraction accuracy, but model selection must account for prompt choice, throughput, and serving-stack behavior.
Donghao Huang, Tomas Drietomsky, Benjamin Barrett +1
Research and Development, Mastercard, Arlington, VA, USA · School of Computing and Information Systems, Singapore Management University, Singapore · Economic Intelligence, Mastercard, Prague, Czech Republic
Banks analyse sequential financial transaction data to perform many tasks, including fraud prevention, credit risk assessment and offer personalization. To improve the predictive accuracy of these tasks, Payments Foundation Models encode transaction sequence data as rich contextual embeddings, which can then be provided to task-specific models as features. However, these Foundation Models are not designed for flexible zero-shot reasoning across novel downstream prediction tasks, limiting their adaptability and utility. Existing LLM-based approaches to zero-shot prediction often fail to fully exploit the predictive signal within transaction data, while relying on costly text serialization or task-specific architectures that scale poorly. To address these limitations, we present the Multimodal Instruction Network for Transactions (MINT), a framework that connects a pretrained transaction sequence encoder to a decoder-only LLM through lightweight embedding injection, transaction-language alignment, and instruction tuning. We find that MINT achieves state-of-the-art predictive question-answering performance in both in-distribution and out-of-distribution questions, while substantially reducing input tokens, latency, and memory consumption compared to text-serialization baselines. Through comprehensive analyses of representations, alignment strategies, training data, and history length, we establish that compact transaction embeddings are a superior approach to transaction representation than text serialization for multimodal reasoning and zero-shot prediction tasks.
Parameswaran Kamalaruban, Viktor Drobnyi, Maeve Madigan +3
Risk and Security AI Lab, Visa Inc. United Kingdom
LLM analytics agents are evaluated on SQL syntax accuracy, but production failures look different: questions with two valid business definitions, questions the warehouse cannot answer, deprecated columns after a schema change, and queries that execute successfully while returning the wrong business number. No execution-match metric can score them. This paper introduces WarehouseReliabilityBench, 400 frozen tasks over two synthetic warehouses in which roughly half the correct responses are a clarification, an abstention or a refusal, with pinned denominators and a pre-registered paired bootstrap fixing each claim verb before the numbers existed. QueryProof, a 7B agent, uses rules derived from a semantic layer and physical catalog to determine its behaviour, and gates every answer on deterministic post-execution checks. On an 80-task synthetic test split evaluated once, QueryProof outperforms a direct-prompted 32B baseline by +0.237 [+0.112, +0.375] Business Truth Rate at 71.0% lower cost per correct answer; against a cost-matched few-shot baseline the accuracy gain holds but the cost difference does not resolve. This compares systems rather than model sizes: the 32B baseline receives none of the scaffolding. False success falls from 0.754 to 0.351 of returned answers, and no wrong number was returned on an answerable task (0 of 24), though 13 answers went to questions requiring clarification or abstention. Removing the routing layer changes little (0.562 against 0.537), so the result does not depend on escalation. Routing tuned on validation over-abstains on test, and the fitted confidence model loses to the heuristic it replaced. Resampling template families rather than tasks widens both accuracy intervals to include zero, so the effect's direction is better supported than its magnitude. The gain tracks the deterministic layer, though no component ablation was run.