Application Graph Builder

A computer-executed method for determining a spam application executing on a client device, the method comprising:

• receiving information corresponding to one or more applications executing on the client device of the account holder;
• generating an application graph for each account holder based on the received information, the application graph including an account holder identification and a list of predefined application categories;
• retrieving, from an application graph database, a set of predefined spam application graphs;
• retrieving, from the application graph database, a set of application graphs that are not pre-defined as spam application graphs;
• comparing the generated application graph with at least one of the retrieved predefined spam application graphs or the set of application graphs not predefined as spam application graphs to find a similar application graph, the similarity determined by a similarity score;
• and
• determining a likelihood that the client device of one or more account holders is executing a spam application based on the comparison.