There is disclosed a method and system for determining users submitting abnormal organization ratings. The method comprises retrieving organization rating activity. The method comprises generating a graph of the organization rating activity and determining a complete subgraph in the graph. The method then comprises determining whether the ratings for the subgraph satisfy a threshold distribution, and after determining that the ratings do satisfy the threshold distribution, storing an indication that the users who submitted those ratings are associated with abnormal organization ratings.