| CPC H04M 3/436 (2013.01) [H04M 1/66 (2013.01); H04W 12/128 (2021.01)] | 20 Claims |

|
1. A system, comprising:
a processor; and
a memory that stores executable instructions that, when executed by the processor, facilitate performance of operations, comprising:
identifying multiple calls involving user devices in a mobile communication system based on shared call information;
obtaining call detail record data for the multiple calls;
identifying spam patterns in the call detail record data;
obtaining call trace records for the multiple calls according to the spam patterns;
identifying a group of call trace records based on a shared call trace feature of the multiple calls;
aggregating data from different call trace records of the group of call trace records, forming aggregated data, the different call trace records being associated with different user devices over a predetermined time history;
processing the aggregated data to identify an estimated location, wherein the processing the aggregated data comprises treating the aggregated data as if the aggregated data was associated with a single user device; and
enabling deployment of an investigation at the estimated location.
|