The effectiveness of transaction fraud detection methods directly affects the loss of users in online transactions. However, for low-frequency users with small transaction volume, the existing methods cannot accurately describe their transaction behaviors for each user, or lead to a high misjudgment rate. So we propose a new method for individual behavior construction, which can make the behavior of low-frequency users more accurate by migrating the current transaction group behavior and transaction status. Firstly, we consider the user's only historical transactions, combined with the optimal risk threshold determination algorithm, to form the user's own transaction behavior benchmark. Secondly, through the DBSCAN clustering algorithm, the behavior characteristics of all current normal samples and fraud samples are extracted to form the common behavior of the current transaction group. Finally, based on historical transaction records, the current transaction status is extracted using a sliding window mechanism. The combination of the three constitutes a new transaction behavior of the user. On this basis, a multi-behavior detection model based on new transaction behavior is proposed. According to the result of each behavior, Naive Bayes model is used to calculate the probability that current transaction belongs to fraud, and finally determine whether current transaction is fraud. Experiments prove that the method proposed in this paper can have a good effect on low-frequency users, which can accurately identify fraud transactions and has a low misjudgment rate for normal transactions.