Systems and methods for anomaly detection includes accessing first data comprising a plurality of historical reversion transactions. A plurality of legitimate transactions are determined from the plurality of historical reversion transactions. An autoencoder is trained using the plurality of legitimate transactions to generate a trained autoencoder capable of measuring a given transaction for similarity to the plurality of legitimate transactions. A first reconstructed transaction is generated by the trained autoencoder using a first transaction. The first transaction is determined to be anomalous based on a reconstruction difference between the first transaction and the first reconstructed transaction.