Examples are disclosed that relate to detecting cheating at a game platform level using machine learning techniques. One example provides a computing system comprising a logic subsystem and a data-holding subsystem. The data-holding subsystem comprises instructions executable by the logic subsystem to receive notifications related to user progress in a game provided by the game to the online game platform, apply a classifying function to classify the user progress in the game as normal or outlying based upon the notifications, if the progress is classified as outlying then taking an action in response to the outlying classification, and if the progress is not classified as outlying then not taking the action.