Monitor Zoho CRM changes & alert on suspicious activity with Google Sheets

📄 Zoho CRM Change Tracking & Automated Suspicious Activity Alerts Workflow

This n8n workflow automatically monitors selected Zoho CRM modules for record changes, identifies suspicious modification patterns, logs all activity into a Google Sheet, generates an audit JSON file for each record and sends immediate email alerts for suspicious events. It runs incrementally using a time window so only recent changes are processed, keeping monitoring continuous and accurate.

⚡ Quick Start — “Implement in 5 Steps”

1. Import the workflow JSON into n8n. 2. Connect credentials: Zoho CRM OAuth2, Gmail OAuth2, Google Sheets. 3. Update Google Sheet ID + recipient email if needed. 4. Review modules being monitored (Leads, Contacts, Accounts, Deals). 5. Activate the workflow — n8n begins tracking CRM changes instantly.

What It Does

This workflow acts as an automated security and audit layer for Zoho CRM. It fetches updated records from selected CRM modules within a calculated time window, extracts critical change details, and enriches them with timestamps, ownership, field change counts, and metadata. Based on defined rules, it identifies unusual or high-risk patterns such as deletions, ownership updates, email modifications or bulk field changes.

Every record that is processed is output in two ways:

Structured logging into a Google Sheet (appended or updated). Binary JSON audit file generated for robust audit storage.