1. A computer implemented method for detecting system fraud on a network, comprising: receiving at least one data record of an activity by a customer of a service from a company provide said service; checking the data record against a plurality of rules, said rules defined by said company; responsive to a determination that at least one of the rules has been satisfied by the data record, generating an alert; and scoring the alert by a predictive model to determine a likelihood that the activity is fraudulent.