We currently track these in Airtable. Let's create a model for it. This will also allow us to do (non-user reported) suspected fraud detection in the future.