1. A method performed by one or more servers, the method comprising: generating, by one or more servers, a first event record for one or more telephone calls handled by one or more telecommunications systems in one or more networks; applying, by the one or more servers and using a first fraud detection test, a first fraud detection rule, of a plurality of fraud detection rules, to the first event record, the first event record being of an account and corresponding to information associated with suspected fraud at a first time; generating, by the one or more servers and based on applying the first fraud detection rule, a first fraud alarm generating, by the one or more servers, a second event record for the one or more telephone calls handled by the one or more telecommunications systems in the one or more networks, the second event record being of the account and corresponding to the information associated with the suspected fraud at a second time; applying, by the one or more servers and using a second fraud detection test, a dynamically reconfigured fraud detection rule, of a plurality of dynamically reconfigured fraud detection rules, to the second event record; generating, by the one or more servers and based on applying the dynamically reconfigured fraud detection rule, a second fraud alarm, the second fraud alarm being different than the first fraud alarm; obtaining, by the one or more servers, first information from a plurality of devices; obtaining, by the one or more servers, an enhanced first fraud alarm by enhancing the first fraud alarm based on the first information, the first information being based on a first type of alarm associated with the first fraud alarm, and the first information including additional information and information indicating how the additional information is to be added to the first fraud alarm to obtain the enhanced first fraud alarm; obtaining, by the one or more servers, second information from the plurality of devices; obtaining, by the one or more servers, an enhanced second fraud alarm by enhancing the second fraud alarm based on the second information, the second information being based on a second type of alarm associated with the second fraud alarm, and the second information including other information and information indicating how the other information is to be added to the second fraud alarm to obtain the enhanced second fraud alarm; correlating, by the one or more servers, the enhanced first fraud alarm with the enhanced second fraud alarm into a fraud case for the account; and instituting, by the one or more servers one or more switch-based automatic number identification (ANI) blocks based on correlating the enhanced first fraud alarm with the enhanced second fraud alarm.