Provided is a system including at least one processor configured to detect a communication request for a communication between a protected party and a second party, in response to determining the communication originated from the second party, determine if an identity of the second party is verified by the originating service provider based on at least one of STIR/SHAKEN attestation or a network operator, in response determining that the identity of the second party is verified by the originating service provider, initiate a search in a database maintained by the protected party based on an identifier of the second party, determine if the identifier of the second party matches an entry in the database based on the search, and in response to determining that the identifier of the second does not match an entry in the database, automatically monitor the communication in real-time.