Security policies must be changing all the time due to changes in fraud patterns. The $9 transaction getting flagged in a different country isn’t a surprise any

Security policies must be changing all the time due to changes in fraud patterns. The $9 transaction getting flagged in a different country isn’t a surprise anymore since banks figure out that fraudsters “test” credit card numbers with small transactions and then sell that to others (for more fraud) or use for larger fraudulent transactions. This doesn’t explain why the same transactions from the past weren’t taken into account, but must be related to this fraud pattern having a higher weight in flagging transactions.