Systems, methods and programs for detecting unauthorized use of text based communications services

A computer readable storage device storing computer program instructions, which, when executed on a processor, cause the processor to perform operations comprising:

• sampling particular messages to provide message samples;
• creating the authorized profile using the message samples;
• determining that the authorized profile is sufficient to identify an unauthorized text communication;
• comparing a language pattern extracted from a message with a language pattern associated with the authorized profile to determine a deviation between the language pattern extracted from the message and the language pattern associated with the authorized profile;
• determining whether the deviation is within an allowable amount of deviation, the allowable amount of deviation based on an amount of the message samples used in creating the authorized profile;
• and
• determining whether the message is an unauthorized user account communication based on whether the deviation is within the allowable amount of deviation.

An apparatus, comprising:

• a processor;
• and
• a memory to store computer program instructions, the computer program instructions when executed on the processor cause the processor to perform operations comprising:
• sampling particular messages to provide message samples;
• creating the authorized profile using the message samples;
• determining that the authorized profile is sufficient to identify an unauthorized text communication;
• receiving a message;
• comparing a language pattern extracted from the message with a language pattern associated with the authorized profile to determine a deviation between the language pattern extracted from the message and the language pattern associated with the authorized profile;
• determining whether the deviation is within an allowable amount of deviation, the allowable amount of deviation based on an amount of the message samples used in creating the authorized profile;
• and
• determining whether the message is an unauthorized user account communication based on whether the deviation is within the allowable amount of deviation.