How can you detect a risky transaction before a single confirmation?

[Alexthedefender04]

Looking at how people trying hard to abuse faucet and other, set maximum allowed instant deposit won't help too much.
If it's too low, genuine users don't bother use it. If it's too high, people could abuse it with automated script.