This rule identifies suspicious duplicate transactions that may indicate replay attacks, terminal malfunction exploitation, or deliberate double-charging fraud.

Triggers when the system detects:
1. Same card number, terminal ID, and exact transaction amount
2. Multiple identical transactions within 10 minutes
3. Combined total of duplicates reaches or exceeds AED 10,000

While occasional legitimate duplicates can occur from customer confusion or network retries, this pattern—especially with high values—often indicates fraud. The rule places these transactions on HOLD to prevent duplicate charges and verify legitimacy with the cardholder.