System and method for fraud detection through network monitoring

A non-transitory, machine-readable medium, comprising executable instructions that, when executed by a processing system including a processor, facilitate performance of operations, the operations comprising:

• monitoring data traffic of one or more network devices of a user, wherein the data traffic is associated with multiple channels of interaction;
• building user signatures based on the data traffic that indicate historical usage, each signature comprising data elements reflecting user communication, location, and device-usage behavior and being generated using one or more rules, statistical distributions, or trained machine-learning models;
• detecting a change in one or more measured user-behavior indicators of the data traffic, wherein the change indicates fraudulent activity based on a channel-specific user signature and a cross-channel user signature of the user signatures;
• and
• issuing an alert of the fraudulent activity based on the change.

A method, comprising:

• continuously monitoring, by a processing system including a processor, data traffic of one or more network devices of a user, wherein the data traffic is associated with multiple channels of interaction;
• developing, by the processing system, user signatures that indicate historical usage by the user from the data traffic, each signature comprising data elements reflecting user communication, location, and device-usage behavior and being generated using one or more rules, statistical distributions, or trained machine-learning models;
• detecting, by the processing system, a change in one or more measured user-behavior indicators of the data traffic, wherein the change indicates fraudulent activity based on a channel-specific user signature and a cross-channel user signature;
• and
• notifying, by the processing system, the user of the fraudulent activity based on the change.