1,500 transactions, £1.9M processed, and a fraud problem hiding in plain sight. 20% of transactions were flagged fraudulent, but they accounted for 62.5% of transaction value, meaning the risk wasn't spread evenly, it was concentrated in a handful of customer relationships. I also found the bank's own risk categories were wrong: some "low risk" merchant types had fraud rates matching their highest-risk category.