We flag suspicious patterns by analysing audience composition, engagement timing and behavior against expected distributions. Signals include sudden follower spikes, low genuine reach versus follower counts, repetitive commenter networks, and inconsistent view/like ratios. Cross-checks use lookalike/audience filters and fraud thresholds to label risky creators.