System and method for security management of a plurality of invalid interactions

A method for security management of a plurality of interactions, comprising:

• receiving, by a server, the plurality of interactions, each interaction comprising interaction information associated with a particular one of the plurality of users and a first entity;
• determining a threshold value of the plurality of interactions a threshold volume of the plurality of interactions;
• determining that a value of each of the received plurality of interactions has not exceeded the threshold value of the plurality of interactions;
• determining that the plurality of interactions has not exceeded the threshold volume of the plurality of interactions;
• determining a number of instances of the plurality of interactions that were invalid;
• determining that the number of instances of the plurality of interactions that were invalid exceeds a threshold;
• and
• in response to determining that the number of instances of the plurality of interactions that were invalid exceeds the threshold, determining that the first entity is associated with suspicious indicators, wherein suspicious indicators indicate that there is unauthorized activity associated with the first entity.

A non-transitory computer-readable medium storing instructions that when executed by a processor cause the processor to:

• receive a plurality of interactions, each interaction comprising interaction information associated with a particular of the plurality of users and a first entity;
• determine a threshold value of the plurality of interactions and a threshold volume of the plurality of interactions;
• determine that a value of each of the received plurality of interactions has not exceeded the threshold value of the plurality of interactions;
• determine that the plurality of interactions has not exceeded the threshold volume of the plurality of interactions;
• determine a number of instances of the plurality of interactions that were invalid;
• determine that the number of instances of the plurality of interactions that were invalid exceeds a threshold;
• and
• in response to determining that the number of instances of the plurality of interactions that were invalid exceeds the threshold, determine that the first entity is associated with suspicious indicators, wherein suspicious indicators indicate that there is unauthorized activity associated with the first entity.