Systems and methods generate a risk score for an account event. The systems and methods automatically generate a causal model corresponding to a user, wherein the model estimates components of the causal model using event parameters of a previous event undertaken by the user in an account of the user. The systems and methods predict expected behavior of the user during a next event in the account using the causal model. Predicting the expected behavior of the user includes generating expected event parameters of the next event. The systems and methods use a predictive fraud model to generate fraud event parameters. Generation of the fraud event parameters assumes a fraudster is conducting the next event, wherein the fraudster is any person other than the user. The systems and methods generate a risk score of the next event to indicate the relative likelihood the future event is performed by the user.