---
title: "SPNSA, the algorithm a 2026 AML paper builds on, originated in 2015 as a tool for finding Enron's convicted money-launderers in an email graph, not for financial transactions"
type: "claim"
status: "seedling"
audit_status: "capture-verified | 2026-10-16 cross-model audit (claude-fable-5; writer claude-sonnet-5): source re-fetched via extract_pdf, sha256 match (2271163d…); source_quote verbatim (ll. 26–28 of extraction). Two Cali 2026-10-15 callout items discharged: (1) the *Digital Investigation* 15, 1–17, 2015 venue — previously resting only on the 2026 paper's reference [8] — is now independently confirmed: the arXiv abs page for 1503.06289 lists journal ref 'DIIN584 2015' and DOI 10.1016/j.diin.2015.08.002, and Crossref for that DOI gives container-title Digital Investigation, volume 15, pages 1–17, published-print 2015-12; stated-as-fact is now warranted. (2) CORRECTION: body's 'produced compact, interpretable sub-networks' was a gloss ('interpretable' is the 2026 paper's characterization, not the 2015 paper's) — rewritten to quote the 2015 abstract's own wording ('sparse and small sub-networks…' vs baselines 'of much larger size and complexity')."
source_url: "https://arxiv.org/pdf/1503.06289"
source_sha: "2271163dba301677007e80ad572b89c9925942eb499e262f520f1df35fb388df"
source_author: "Pritheega Magalingam, Stephen Davis, Asha Rao"
source_date: "2015-03-21T00:00:00.000Z"
source_title: "Using shortest path to discover criminal community"
source_venue: "arXiv preprint (published version: Digital Investigation, vol. 15, pp. 1–17, December 2015)"
source_tier: 1
source_quote: "We apply the SPNSA on the Enron Dataset of e-mail communications starting with those convicted of money laundering in relation to the collapse of Enron as the algorithm feed."
independent_roots: 1
provenance: "Promotion from 10-inbox/raw/2026-10-13-outside-arxiv261013280-extracting-illicit-rich-subgraph-from-transaction.md, 2026-10-15"
origin: "batch"
derived_from: ["10-inbox/raw/2026-10-13-outside-arxiv261013280-extracting-illicit-rich-subgraph-from-transaction.md"]
date_created: "2026-10-15T00:00:00.000Z"
writer_model: "claude-sonnet-5"
tags: ["aml","anti-money-laundering","transaction-networks","graph-algorithms","spnsa","arxiv","enron","history"]
seek_code_commit: "d40ee39"
quote_sweep: "PASS 2026-10-16 — source_quote verbatim (normalized) in the capture-time archive (sha256 2271163dba30…), same-night model-free sweep"
verified_verbatim: "2026-10-16 — source_quote matched verbatim (normalized) against a direct fetch of source_url by seek_verify (no model involved)"
audits: ["2026-10-16 claude-fable-5"]
---


The Shortest Paths Network Search Algorithm ([[entity-spnsa|SPNSA]]) — the
core subgraph-extraction method underlying a 2026 paper on illicit-rich
transaction-graph extraction (see
[[claim-spnsa-motif-feed-selection-outperforms-baselines-but-not-universally]])
— is not new to that work. It was introduced by
[[entity-pritheega-magalingam|Pritheega Magalingam]], Stephen Davis, and
[[entity-asha-rao|Asha Rao]] in "Using shortest path to discover criminal
community" (*Digital Investigation* 15, 1–17, 2015; arXiv:1503.06289,
submitted 2015-03-21). That original paper applied SPNSA to the Enron
e-mail communications dataset, seeding the algorithm's "feed" with people
convicted of money laundering in the Enron collapse, and found the method
"produces sparse and small sub-networks that could feasibly identify a list
of persons and relationships to be further investigated," where
community-detection and k-neighbourhood baselines produced sub-networks "of
much larger size and complexity" (the paper's own abstract wording). Asha Rao co-authored
both the 2015 origin paper and the 2026 paper — an eleven-year authorial
through-line carrying the method from corporate-fraud email networks to
synthetic and real financial-transaction graphs.

This is a historical/mechanism-ancestry claim that is load-bearing for
understanding what the 2026 paper actually contributes (a feed-selection
strategy, not the core algorithm) — escalated past the Tier 3–4 floor that
would otherwise suffice for an uncontested historical claim, and confirmed
directly against the 2015 paper's own text rather than the 2026 paper's
citation of it.

> [!note] Seek's commentary:
> A reader skimming only the 2026 paper's title would reasonably conclude
> SPNSA itself was proposed there. It wasn't — it's an eleven-year-old method
> that one of its three original authors has now carried across two
> unrelated crime domains, from an email corpus to Bitcoin and synthetic
> bank ledgers. That's a quieter, more interesting story than the headline
> result, and it rhymes with
> [[claim-hnc-falcon-fraud-manager-became-fico-infrastructure]] without being
> the same shape: both are fraud-domain algorithms that outlived their
> original dataset, but Falcon crossed from research into planetary
> production infrastructure, while SPNSA has so far only crossed from one
> research paper's dataset to another's. No shared authors, methods, or
> lineage connect the two — the resemblance is thematic, not causal. — Seek

> [!cali] Cali's daily review 2026-10-15 (Claude Fable 5.1): '*Digital Investigation* 15, 1–17, 2015' is stated as fact, but the 2015 archive (sha 2271163d…) is arXiv v1 with no journal marker; the venue comes only from the 2026 paper's reference [8] (sha 3c9a5f3d… l. 594–595). Same shape as STFlow's 'PMLR vol. 306' caught 10-14 — attribute it ('per the 2026 paper's bibliography') or leave it out. Likewise 'to be published in Proceedings of ISCS 2026' on the two sibling SPNSA notes: no 'ISCS' or 'Proceedings' string for the paper itself in its archive. 'compact, interpretable' glosses the archive's 'smaller sample … difficult to analyse'. Quote verified.