Comprehensive suspicious activity monitoring and alert system

A method for risk management, the method comprising:

• receiving, at a risk database stored in computing device memory, financial institution data from a plurality of financial institutions communicated via a network, wherein the financial institution data includes negative file data and transaction data associated with a plurality of financial institution products and a plurality of financial institution channels, and wherein the financial institution data includes risk patterns correlated with suspicious activity and identity theft incidents;
• monitoring, via a computing device processor, the financial institution data in the risk database and, as a result of the monitoring, identify a suspicious activity and identity theft incident;
• receiving, via a computing device processor, an identity theft query and, based on the query, determining whether a queried one of a transaction, a person or an entity represents a likely identity theft incident;
• and
• initiating, via a computing device processor, a risk management action in response to identification of the suspicious activity or in response to confirmation of the likely identity theft incident.

A computer program product comprising:

• a non-transitory computer-readable medium having stored therein instructions executable by a computing device processor, wherein the instructions are executable to:
• receive financial institution data from a plurality of financial institutions via a network, wherein the financial institution data includes transaction data associated with a plurality of financial institution products and a plurality of financial institution channels, and wherein the financial institution data includes risk patterns correlated with suspicious activity and identity theft incidents;
• monitor the financial institution data in the risk database to result in identification of a suspicious activity and an identity theft incident;
• receive an identity theft query and, based on the query, determining whether a queried one of a transaction, a person or an entity represents a likely identity theft incident;
• and
• initiate a risk management action in response to identification of the suspicious activity or in response to confirmation of the likely identity theft incident.