Systems, methods, and computer-readable storage media for monitoring risk levels in continuing to allow a potentially compromised payment card to continue to be used. An exemplary system can include a processor which receives a notification of unauthorized use of a card, retrieves a transaction history of authorized use of the card, and performs predictive modeling based on the transaction history based to determine a predicted transaction amount for future transactions. The system can then determine a risk level of continued use of the card and modify processing of the ongoing transaction based on the risk level. The system can then issue a risk level notification to proper authorities.