Your model should be made more dynamic, to include that Amazon can adjust to new fraudulent methods. Once a method is discovered for making fraudulent purchases, it will be reused and broadened. Like the story of the Dutch boy and the dike, it will get larger and larger until it collapses. Amazon no doubt figures that they can plug the hole early enough, and reports like this are part of that detection system.