Re: The numbers don't add up
The number of actual transactions will often be much higher than what a user thinks is a single transaction.
And don't forget reporting requirements. Just doing a scan for suspicious behaviour will run through the entire database like a dose of salts.