This rule implements geography-based risk monitoring for transactions originating from countries with elevated fraud threat profiles.

System alerts when:
1. Transaction originates from designated high-risk country:
   - Iraq (IQ)
   - Egypt (EG)
   - Libya (LY)
   - Mozambique (MZ)
2. Transaction amount exceeds AED 5,000

These countries flagged due to:
- Elevated historical fraud rates in payment data
- Documented organized fraud operations
- Challenging cross-border law enforcement coordination
- Known sources of card data compromise
- Political/economic instability increasing fraud incentives

Lower threshold (AED 5,000 vs. standard international threshold) reflects:
- Higher baseline fraud risk from these origins
- Greater difficulty in fraud recovery and investigation
- Potential sanctions or compliance complications
- Need for enhanced transaction scrutiny

Generates ALERT for analyst review to balance:
- Legitimate business from these regions (avoiding discrimination)
- Elevated fraud risk requiring additional validation
- Enhanced due diligence for compliance requirements
- Pattern detection for organized fraud operations