I don't know what click fraud is but it's a very small entertainment agency market in Durban, South Africa's 3rd largest city. We only advertised locally (specified in AdWords)
The first step you might take is to check that you are not advertising with AdWords partner networks, as they might be the reason for the clicks on your ads.
Second, you can check your server logs and verify clicks from Google Ads, especially the geolocation of those clicks. If they are not from your region and the visitors perform no action after viewing the first page, this is most probably click fraud.
I use our own open-source security platform (I'm a co-founder) for this purpose (1), as it's server-side and works even if bots aren't running JS. However, your website analytics might also be useful if they can collect events without JS.