drop processor + fraud exports · correlate charge to fraud signal · runs locally
drop processor + fraud exports · local only
heuristic screener · vendor schema varies · not definitive proof