Our layered machine learning framework can enhance real-time transaction monitoring in high-value payment systems, which are a central piece of a country’s financial infrastructure. When tested on data from Canadian payment systems, it demonstrated potential for accurately identifying anomalous transactions. This framework could help improve cyber and operational resilience of payment systems.