The disclosed method and apparatus combine interactions and transactions in order to detect fraud acts or fraud attempts. In one embodiment, one or more interactions is correlated with one or more transactions, the interactions is and transactions features are combined, and features are extracted from the combined structure. The features are compared against one or more profiles, and a combined risk score is determined for the interactions or transactions. If the risk score exceeds a predetermined threshold, a preventive/corrective action can be taken.