Abstract: An apparatus for security management of application information comprises a processor operable to receive the application information associated with a first entity and to receive entity device information for a first entity device associated with the first entity. The processor is operable to determine that a portion of data fields of the application information associated with the first entity corresponds to a portion of data fields of entity account data associated with a second entity and to determine that a portion of the entity device information associated with the first entity device corresponds to a portion of the entity device information associated with a second entity device that is associated with the second entity. The processor is further operable to determine that the first entity is associated with suspicious indicators, wherein suspicious indicators signal that there is suspicious activity associated with the first entity.

Abstract: An apparatus for security management of a plurality of interactions comprises a processor operable to receive a plurality of interactions, where each interaction comprises interaction information associated with at least one of a plurality of users and a first entity. The processor is operable to determine a threshold value of the plurality of interactions and a threshold volume of the plurality of interactions, determine that a value of each of the plurality of interactions has not exceeded the threshold value of the plurality of interactions, and determine that the plurality of interactions has not exceeded the threshold volume of the plurality of interactions. The processor is operable to determine a number of instances of the plurality of interactions that were invalid, determine that the number of instances of the plurality of interactions that were invalid exceeds a threshold, and determine that the first entity is associated with suspicious indicators.

Abstract: An apparatus for security management of a plurality of interactions comprises a processor operable to receive a plurality of interactions, where each interaction comprises interaction information associated with one of one or more users and a first entity. The processor is operable to determine a threshold value of the plurality of interactions and a threshold volume of the plurality of interactions, determine that a value of each of the plurality of interactions has not exceeded the threshold value of the plurality of interactions, and determine that the plurality of interactions has not exceeded the threshold volume of the plurality of interactions. The processor is operable to determine a number of instances of the plurality of interactions that were invalid, determine that the number of instances of the plurality of interactions that were invalid exceeds a threshold, and determine that the first entity is associated with suspicious indicators.

Abstract: An apparatus for security management of a plurality of interactions comprises a processor operable to receive a plurality of interactions, where each interaction comprises interaction information associated with one of one or more users and a first entity. The processor is operable to determine a threshold value of the plurality of interactions and a threshold volume of the plurality of interactions, determine that a value of each of the plurality of interactions has not exceeded the threshold value of the plurality of interactions, and determine that the plurality of interactions has not exceeded the threshold volume of the plurality of interactions. The processor is operable to determine a number of instances of the plurality of interactions that were invalid, determine that the number of instances of the plurality of interactions that were invalid exceeds a threshold, and determine that the first entity is associated with suspicious indicators.

Abstract: An apparatus for security management of application information comprises a processor operable to receive the application information associated with a first entity and to receive entity device information for a first entity device associated with the first entity. The processor is operable to determine that a portion of data fields of the application information associated with the first entity corresponds to a portion of data fields of entity account data associated with a second entity and to determine that a portion of the entity device information associated with the first entity device corresponds to a portion of the entity device information associated with a second entity device that is associated with the second entity. The processor is further operable to determine that the first entity is associated with suspicious indicators, wherein suspicious indicators signal that there is suspicious activity associated with the first entity.