Our fraud team wants a rule: alert whenever the same card has 3 or more transactions within 10 minutes. For example, card 5566 transacted at 10:00, 10:04, 10:09 and 10:30. How would you implement this in SQL? After launch, the rule flags 2% of cards daily, but the actual fraud rate is only 0.1%. How do you interpret that and how would you tune it?

风控想做一个规则：同一张卡10分钟内出现3笔或以上交易就预警。比如卡5566在10点、10点04、10点09、10点30各刷了一笔。你会怎么用SQL实现？上线后这条规则每天标出2%的卡，但实际欺诈率只有0.1%，你怎么看，怎么调？