SQL queries for fraud detection
This repository showcases fraud-related SQL queries written for internal investigation scenarios. All queries have been sanitized to remove proprietary or company-specific identifiers.
Identifies IP addresses used by more than three distinct users—useful for detecting possible fraud rings or account sharing.
Lists users associated with a flagged IP address