System and method for fraud detection through network monitoring

Abstract

Aspects of the subject disclosure may include, for example, a device, having a processing system including a processor; and a memory that stores executable instructions that, when executed by the processing system, facilitate performance of operations of: collecting data traffic of one or more network devices of a user, wherein the data traffic is associated with multiple channels of interactions; building a channel-specific user signature and a cross-channel user signature of normal usage for the user based on the data traffic collected; detecting a change in a characteristic of the data traffic, wherein the change indicates fraudulent activity based on the channel-specific user signature and the cross-channel user signature; and issuing an alert of the fraudulent activity based on the change. Other embodiments are disclosed.