A method for identifying merchant risk includes collecting data elements for a plurality of merchants; automatically performing a first level process using the data elements so as to identify a first subset of merchants for review; automatically performing a second level process so as to collect additional information for the first subset of merchants; and automatically performing a third level process using the first subset of merchants and the additional information so as to identify a second subset of merchants requiring further review. A system for practicing the method is also disclosed.