Methods and systems for abuse detection of zero-rated data

1. A method, comprising:

at a server system having one or more processors and memory storing instructions for execution by the one or more processors:

monitoring usage patterns of a group of users for a particular data type, including zero-rated data usage by the group of users for the particular data type;

setting a zero-rated data-usage threshold for the particular data type based at least in part on the monitored usage patterns for the group of users;

continuing to monitor the usage patterns of the group of users for the particular data type during a period of time, including the zero-rated data usage of the group of users for the particular data type;

determining whether a zero-rated data usage for the particular data type by a user in the group of users during the period of time satisfies the zero-rated data-usage threshold; and

in response to determining that the zero-rated data usage by the user during the period of time satisfies the zero-rated data-usage threshold, flagging an account associated with the user as a potential zero-rated data usage abuser.

2. The method of claim 1 , further comprising, at the server system:

comparing historical data usage by the user with the zero-rated data usage by the user during the period of time,

wherein flagging the account associated with the user is performed in response to determining that a deviation of the zero-rated data usage by the user during the period of time from the historical data usage by the user satisfies a threshold amount.

3. The method of claim 1 , wherein the period of time is a first period of time and the method further comprises, at the server system:

determining whether a zero-rated data usage by the user during a second period of time for the particular data type satisfies the zero-rated data-usage threshold, the second period of time being subsequent to the first period of time; and

flagging the account associated with the user as a potential zero-rated data usage abuser in response to determining that the zero-rated data usage by the user during the second period of time satisfies the zero-rated data-usage threshold.

4. The method of claim 1 , wherein:

the group of users is a first group of users sharing one or more characteristics; and

the method further comprises, at the server system, placing users into a plurality of groups including the first group based on the one or more characteristics.

5. The method of claim 4 , further comprising, at the server system:

identifying other users, distinct from the user, in the first group who have zero-rated data usages for the particular data type during the period of time that satisfy the zero-rated data-usage threshold; and

in response to identifying the other users, flagging accounts associated with the other users as potential zero-rated data usage abusers.

6. The method of claim 4 , wherein the one or more characteristics include wireless carriers associated with the users.

7. The method of claim 4 , wherein the one or more characteristics include internet protocol (IP) addresses associated with the users.

8. The method of claim 4 , wherein the one or more characteristics include regions associated with the users.

9. The method of claim 4 , wherein the one or more characteristics include group memberships in a social networking service provided by the server system.

10. The method of claim 4 , wherein the zero-rated data-usage threshold is a first zero-rated data-usage threshold and the method further comprises, at the server system, setting a respective zero-rated data-usage threshold for each group of the plurality of groups based at least in part on respective usage patterns of users in each group.

11. The method of claim 1 , wherein setting the zero-rated data-usage threshold comprises setting the zero-rated data-usage threshold for a specific platform.

12. The method of claim 1 , wherein:

the group of users are members of a social networking service provided by the server system; and

the account of the user is for the social networking service.

13. The method of claim 1 , further comprising, at the server system, in response to determining that the zero-rated data usage by the user satisfies the zero-rated data-usage threshold, disabling the account associated with the user.

14. The method of claim 1 , further comprising, at the server system, providing a report that identifies the account associated with the user as a potential zero-rated data usage abuser.

15. A server system, comprising:

one or more processors; and

memory storing one or more programs for execution by the one or more processors, the one or more programs including instructions for:

monitoring usage patterns of a group of users for a particular data type, including zero-rated data usage by the group of users for the particular data type;

setting a zero-rated data-usage threshold for the particular data type based at least in part on the monitored usage patterns for the group of users;

continuing to monitor the usage patterns of the group of users for the particular data type during a period of time, including the zero-rated data usage of the group of users for the particular data type;

determining whether a zero-rated data usage for the particular data type by a user in the group of users during the period of time satisfies the zero-rated data-usage threshold; and

in response to determining that the zero-rated data usage by the user during the period of time satisfies the zero-rated data-usage threshold, flagging an account associated with the user as a potential zero-rated data usage abuser.

16. The server system of claim 15 , wherein the one or more programs further include instructions for:

comparing historical data usage by the user with the zero-rated data usage by the user during the period of time,

wherein flagging the account associated with the user is performed in response to determining that a deviation of the zero-rated data usage by the user during the period of time from the historical data usage by the user satisfies a threshold amount.

17. The server system of claim 15 , wherein the period of time is a first period of time and the one or more programs further including instructions for:

determining whether a zero-rated data usage by the user during a second period of time for the particular data type satisfies the zero-rated data-usage threshold, the second period of time being subsequent to the first period of time; and

flagging the account associated with the user as a potential zero-rated data usage abuser in response to determining that the zero-rated data usage by the user during the second period of time satisfies the zero-rated data-usage threshold.

18. The server system of claim 15 , wherein:

the group of users are members of a social networking service provided by the server system; and

the account of the user is for the social networking service.

19. The server system of claim 15 , wherein the one or more programs further include instructions for disabling the account associated with the user in response to determining that the zero-rated data usage by the user satisfies the zero-rated data-usage threshold.

20. A non-transitory computer-readable storage medium, storing one or more programs configured for execution by one or more processors of a server system, the one or more programs including instructions, which when executed by the one or more processors cause the server system to:

monitor usage patterns of a group of users for a particular data type, including zero-rated data usage by the group of users for the particular data type;

set a zero-rated data-usage threshold for the particular data type based at least in part on the monitored usage patterns for the group of users;

continue to monitor the usage patterns of the group of users for the particular data type during a period of time, including the zero-rated data usage of the group of users for the particular data type;

determine whether a zero-rated data usage for the particular data type by a user in the group of users during the period of time satisfies the zero-rated data-usage threshold; and

in response to determining that the zero-rated data usage by the user during the period of time satisfies the zero-rated data-usage threshold, flag an account associated with the user as a potential zero-rated data usage abuser.