This rule detects potentially compromised merchant accounts that have been inactive and suddenly process transactions after extended dormancy.

Triggers when:
1. A merchant has had ZERO transaction activity for 30+ consecutive days
2. Sudden transaction processing resumes after this dormancy period

Inactive merchant accounts are high-value targets for fraudsters because:
- Monitoring is typically reduced
- Sudden activity may not trigger immediate attention
- Account credentials may be outdated/forgotten by legitimate owners

The system places these resurrection transactions on HOLD to verify the merchant account has not been compromised and the business owner authorized the resumption of processing.