A computer-implemented method for detecting anomaly in a radio access network (RAN ), the method comprising: - receiving quality parameters data for a wide communication network established by plurality of base stations associated with the RAN ; - defining a first radio fingerprint based on the quality parameters data for the wide communication network , wherein defining the first radio fingerprint comprises: - isolating the quality parameters data for one or more base stations, of the plurality of base stations , installed in a geological area from the received quality parameters data for the wide communication network , wherein the quality parameters data is isolated by using clustering algorithm; and - defining the first radio fingerprint based on the said isolated quality parameters data; - monitoring, by one of the base stations, of the plurality of base stations , installed in the geological area , quality parameters data for a local communication network , wherein the local communication network is a subset of the wide communication network ; - defining a second radio fingerprint based on the quality parameters data for the local communication network ; - comparing the first radio fingerprint and the second radio fingerprint to determine variation in the quality parameters data therebetween; and - generating an alert signal indicative of presence of a possible fake base station in the geological area based on the determined variation in the quality parameters data. - receiving quality parameters data for a wide communication network established by plurality of base stations associated with the RAN ; - defining a first radio fingerprint based on the quality parameters data for the wide communication network , wherein defining the first radio fingerprint comprises: - isolating the quality parameters data for one or more base stations, of the plurality of base stations , installed in a geological area from the received quality parameters data for the wide communication network , wherein the quality parameters data is isolated by using clustering algorithm; and - defining the first radio fingerprint based on the said isolated quality parameters data; - isolating the quality parameters data for one or more base stations, of the plurality of base stations , installed in a geological area from the received quality parameters data for the wide communication network , wherein the quality parameters data is isolated by using clustering algorithm; and - defining the first radio fingerprint based on the said isolated quality parameters data; - monitoring, by one of the base stations, of the plurality of base stations , installed in the geological area , quality parameters data for a local communication network , wherein the local communication network is a subset of the wide communication network ; - defining a second radio fingerprint based on the quality parameters data for the local communication network ; - comparing the first radio fingerprint and the second radio fingerprint to determine variation in the quality parameters data therebetween; and - generating an alert signal indicative of presence of a possible fake base station in the geological area based on the determined variation in the quality parameters data. <EOS>