Preventing fraud is a game of cat and mouse