1. A method comprising: automatically generating a causal model corresponding to a user, the generating comprising estimating a plurality of components of the causal model using event parameters of a previous event undertaken by the user in an account of the user; predicting expected behavior of the user during a next event in the account using the causal model, wherein predicting the expected behavior of the user includes generating expected event parameters of the next event; using a predictive fraud model, generating fraud event parameters, wherein generating the fraud event parameters assumes a fraudster is conducting the next event, wherein the fraudster is any person other than the user; and generating a risk score of the next event using the expected event parameters and the fraud event parameters, the risk score indicating the relative likelihood the future event is performed by the user versus the fraudster.