We flag suspicious patterns using recent-post distributions, engagement consistency, and audience signals. Metrics come from the rolling 30-day window - we compare ER% vs. posting cadence, look for one-off spikes, abnormal growth, bot-like follower mixes, and market mismatches. Results surface as fraud indicators on the profile sheet.