Identification of anomalous telecommunication service usage

A non-transitory computer-readable medium storing instructions that when executed perform operations comprising:

• determining a set of telecommunication service metrics associated with a first user of a telecommunication service provider;
• training a machine learning model, using telecommunication service information associated with a first user segment comprising the first user, to generate a trained machine learning model;
• determining, using the trained machine learning model, a forecast of telecommunication service usage associated with the first user segment;
• determining that a second user belongs to the first user segment;
• comparing a first telecommunication service usage metric, associated with service usage of the second user, with a first range of a telecommunication service usage metric indicated by the forecast of telecommunication service usage associated with the first user segment;
• flagging the second user as having anomalous behavior based upon the comparison;
• determining one or more locations associated with one or more users of the telecommunication service provider, wherein the one or more users comprise the second user;
• and
• transmitting, to a telecommunication resource allocation device, instructions to allocate one or more telecommunication resources to the one or more locations.

A device comprising:

• a processor coupled to memory, the processor configured to execute instructions to perform operations comprising:
• determining a set of telecommunication service metrics associated with a first user of a telecommunication service provider;
• training a machine learning model, using telecommunication service information associated with a first user segment comprising the first user, to generate a trained machine learning model;
• determining, using the trained machine learning model, a forecast of telecommunication service usage associated with the first user segment;
• determining that a second user belongs to the first user segment;
• comparing a first telecommunication service usage metric, associated with service usage of the second user, with a first range of a telecommunication service usage metric indicated by the forecast of telecommunication service usage associated with the first user segment;
• flagging the second user as having anomalous behavior based upon the comparison;
• determining one or more locations associated with one or more users of the telecommunication service provider, wherein the one or more users comprise the second user;
• and
• transmitting, to a telecommunication resource allocation device, instructions to allocate one or more telecommunication resources to the one or more locations.