If a client's transaction data shows a sudden spike in anomalies, what structured steps would you take to investigate potential fraud?