Spotting Suspicious Activity: Fraud detection engines consume transaction events from Kafka and analyze them using predefined rules, statistical methods, or machine learning models. They may flag unusual spending patterns, unexpected locations, or rapid transactions. The detection logic, not Kafka itself, determines whether activity looks suspicious.