We run layered audience forensics: semantic content matching + behavioral signals over the rolling 30-day window, look for abnormal engagement patterns, unnatural view/like ratios, sudden follower spikes, and low reachability. We flag accounts via fraud-risk scores, compare against peers, and surface % of followers likely to see posts for rapid vetting.