1. An apparatus comprising: a communication transceiver; a hardware processor; and a computer readable medium storing instructions that, when executed by the hardware processor, cause the apparatus to: store a plurality of usage parameters associated with the apparatus, wherein the plurality of usage parameters includes an app usage parameter, a location parameter, and an in-app use parameter; store a first signature including a first set of parameter values for the plurality of usage parameters based on a first set of user inputs; generate a second signature including a second set of parameter values for the plurality of usage parameters based on a second set of user inputs; compare the second signature with the first signature to determine a signature difference value representative of a difference between the first signature and the second signature; compute an average signature difference value over a plurality of past signature difference values associated with usage of the apparatus; generate a confidence score for the second signature based at least on a ratio of the signature difference value to the average signature difference value; if the confidence score is greater than a preset maximum score threshold, identify the second set of user inputs as being fraudulent; and in response to determining that the communication transceiver is in an inactive state, activate the communication transceiver without alerting a user of the apparatus and establish a communication link with a remote server; and if the confidence score is less than or equal to the preset maximum score threshold, identify the second set of user inputs as being not fraudulent and update the average signature difference value based on the signature difference value.