This rule identifies fraudulent reuse of expired card credentials that should no longer be valid for transactions.

System alerts when:
1. Card expiration date has passed
2. Same expired card attempts transaction at previously-used merchant
3. Transaction should have been automatically declined but wasn't

Expired card reuse indicates several fraud scenarios:
- Merchant storing card data improperly (PCI DSS violation)
- Fraudster using stolen card data with fake expiration date
- Compromised terminal not validating expiration dates
- Account testing to identify which credentials still work
- Merchant subscription fraud using outdated payment methods

This pattern is concerning because:
- Card should be automatically declined by issuer
- Suggests security control failures in payment flow
- May indicate systematic merchant compliance issues
- Could be part of larger fraud ring operation

Alert enables investigation of:
- Merchant card data handling practices
- Terminal security configuration
- Potential PCI DSS violations
- Need for merchant education or enforcement action