Could my own staff be causing what looks like click fraud?

Often, yes, and it is the first thing to rule out. Intake staff checking the ad is running, a marketing coordinator testing a landing page, or a partner searching the firm name all generate clicks you pay for. Exclude your office IP addresses, then look again after a week. If the pattern disappears, you have your answer and it cost you nothing.