A processing system including at least one processor may identify an excess utilization of a telecommunication network by a plurality of mobile monitoring devices. The plurality of mobile monitoring devices may be of a same mobile monitoring device type. In addition, the plurality of mobile monitoring devices may be associated with a plurality of users and wherein a primary function of the plurality of mobile monitoring devices is inaccessible to control by the plurality of users. The processing system may then determine that the excess utilization is not caused by the primary function of the plurality of mobile monitoring devices and perform at least one remedial action in response to the detecting of the excess utilization that is not caused by the primary function of the plurality of mobile monitoring devices.