Missing details – real leaks often include recent transactions or bank names. Fake ones usually don’t. Patterns – like card numbers going up in order, or emails like bob1@gmail, bob2@gmail, etc.