A computer-implemented method for detecting anomaly in a radio access network (RAN (102, 300)), the method comprising: - receiving quality parameters data for a wide communication network established by plurality of base stations (110, 302) associated with the RAN (102, 300); - defining a first radio fingerprint based on the quality parameters data for the wide communication network, wherein defining the first radio fingerprint comprises: - isolating the quality parameters data for one or more base stations, of the plurality of base stations (110, 302), installed in a geological area from the received quality parameters data for the wide communication network, wherein the quality parameters data is isolated by using clustering algorithm; and - defining the first radio fingerprint based on the said isolated quality parameters data; - monitoring, by one of the base stations, of the plurality of base stations (110, 302), installed in the geological area, quality parameters data for a local communication network, wherein the local communication network is a subset of the wide communication network; - defining a second radio fingerprint based on the quality parameters data for the local communication network; - comparing the first radio fingerprint and the second radio fingerprint to determine variation in the quality parameters data therebetween; and - generating an alert signal indicative of presence of a possible fake base station in the geological area based on the determined variation in the quality parameters data. - receiving quality parameters data for a wide communication network established by plurality of base stations (110, 302) associated with the RAN (102, 300); - defining a first radio fingerprint based on the quality parameters data for the wide communication network, wherein defining the first radio fingerprint comprises: - isolating the quality parameters data for one or more base stations, of the plurality of base stations (110, 302), installed in a geological area from the received quality parameters data for the wide communication network, wherein the quality parameters data is isolated by using clustering algorithm; and - defining the first radio fingerprint based on the said isolated quality parameters data; - isolating the quality parameters data for one or more base stations, of the plurality of base stations (110, 302), installed in a geological area from the received quality parameters data for the wide communication network, wherein the quality parameters data is isolated by using clustering algorithm; and - defining the first radio fingerprint based on the said isolated quality parameters data; - monitoring, by one of the base stations, of the plurality of base stations (110, 302), installed in the geological area, quality parameters data for a local communication network, wherein the local communication network is a subset of the wide communication network; - defining a second radio fingerprint based on the quality parameters data for the local communication network; - comparing the first radio fingerprint and the second radio fingerprint to determine variation in the quality parameters data therebetween; and - generating an alert signal indicative of presence of a possible fake base station in the geological area based on the determined variation in the quality parameters data.