A system for monitoring modem use in a computer system is disclosed. The system includes a computing device and a computer-readable medium that is part of the computing device or in electronic communication with the computing device. The computer-readable medium includes instructions for the system to implement a method for monitoring the system for modem use. The method starts a background application on the system. A communication port is monitored for communication data. It is determined whether the communication data is a modem instruction. If the communication data is a modem instruction, a notification is prepared to be sent to an administrative system. The notification is sent to the administrative system. The notification includes identification information.