Watch for mismatched billing and shipping info, unusually large or rushed orders, repeated failed attempts, or many small test transactions.