Disclosed is a system for escalating security protocol requirements. The system typically includes a processor, a memory, and a security protocol module stored in the memory. The module is typically configured for: monitoring electronic activities associated with a user and collecting device identification information for local network devices associated with the electronic activities; receiving from the user a request to perform a subsequent electronic activity using a first computing device in communication with a first local network; collecting device identification information associated with the first computing device; identifying one or more local network devices in communication with the first local network and collecting device identification information associated with the local network devices in communication with the first local network; and denying the subsequent electronic activity or increasing or decreasing a level of authentication required to complete the subsequent electronic activity based on the collected device identification information.