A method for processing an attempted payment made using a mobile device includes receiving information about the attempted payment, receiving data indicative of a behavior of a user of the mobile device at the time of the attempted payment, computing a likelihood that the attempted payment is fraudulent, based on a comparison of the behavior of the user to an historical behavior pattern of the user, and sending an instruction indicating how to proceed with the attempted payment, based on the likelihood.