We flag anomalies by cross-checking recent-post distributions, ER% vs follower tier, sudden growth spikes, and engagement patterns against expected cadence. Semantic audience signals and fraud-detection heuristics (reachability, demographic skews, view distributions) surface likely fake or inorganic activity within the L30D window.