Abstract: The present relates to a method and system for dynamically detecting illegal activity. The method and system collect new information, where the new information comprises at least an identity of an entity and a type of information. For each new information, the method and system determine whether there is at least one relation between the new information and at least one previous information stored in a storage module, and if there is at least one relation, a logical link is added between the new information and the at least one of the previous information with which there is the at least one relation.