receiving an identity record comprising identity related information, wherein the received identity record comprises fields configured to store the identity related information, and wherein the fields form nodes;

retrieving identity records from a database of identity records generated from a plurality of identity records received from a plurality of client institutions;

linking the received identity record with the retrieved identity records based on the identity related information, wherein the plurality of linked identity records are stored as a graphical network, and wherein the graphical network comprises a plurality of graphs defined by sets of nodes and sets of edges composed of pairs of nodes sharing a common characteristic;

evaluating the received identity record using the linked, retrieved identity records;

generating a fraud score indicative of the likelihood of fraud associated with the input identity record based on the evaluation of the received identity record;

returning the fraud score to a client institution;

receiving updated identity related information from the client institution based on challenge response interrogations initiated in response to the generated fraud score; and

providing enhanced indication of the likelihood of fraud associated with the input identity record.