SKOOR Risk Money movement. Skoored by AI.

Alert · reviewed · open

Entity velocity spiked: 2 transfers and $2,257.08 in 24 hours.

Detector
velocity_spike
Severity
medium
Program
Meridian Remit (simulated)
Subject
entity enti_sim_meri_7dj6hf539oc
Transfer
acht_sim_meri_31ucg7bn9ul · $1,342.15 · ach outgoing
Skoor at alert
null unscored
Hard signal
no
Policy
policy-v1
Opened
2026-09-17 19:30Z
Closed
Decision clock
none · due — no clock
Escalated

Draft narrative

What happened. Alert 08dae7a0-ae80-4eea-9285-e07f5b528c2c fired on entity enti_sim_meri_7dj6hf539oc ("Dune LLC 215") for a velocity spike: 2 transfers totaling $2,257.08 in 24 hours, exceeding 2x the program daily average. The detector routed to review because it is not auto-closable; severity is medium and hard_signal is false. What the evidence shows. The single signal driving the alert is velocity.sum_24h_gt_2x_daily_avg (weight 10). The entity-level score is unscored (skoor null, band unscored, n=29). The one transfer provided, acht_sim_meri_31ucg7bn9ul, is an ACH outgoing credit for $1,342.15, status SETTLED, with no return code, carrying a transfer-level score of 10, band clear, n=34, confidence 0.36. The entity is VERIFIED, not flagged high risk, not PEP, with no review reasons on file and last screened 2026-06-21. There are no prior dispositions on this entity. What was checked. Reviewed the alert evidence and signal list, the program profile (Meridian Remit, declared monthly volume $1,200,000.00, rails ACH/wire/SWIFT, countries US/MX/PH), the one linked transfer's status and score, the entity's verification and risk flags, and prior disposition history. The counterparty's country is listed as unknown, and only one of the two transfers referenced in the summary is included in the evidence provided. What is recommended. No return codes, high-risk flags, PEP status, or prior alerts are present, and the linked transfer is settled with a clear band score. The evidence is limited to a single velocity signal on an unscored entity band, and only one of the two transfers cited is documented here. This does not show a pattern requiring escalation, and the transfer in evidence has already settled, so release does not apply. Close the alert, noting the unknown counterparty country and the missing second transfer record as gaps a reviewer may want to fill before final sign-off.
Recommendation
close
Confidence
0.58
Model
claude-sonnet-5
Drafted
2026-09-17 19:30Z
Rationale
  • Single signal (velocity.sum_24h_gt_2x_daily_avg, weight 10) with hard_signal false and severity medium.
  • Entity is VERIFIED, not high risk, not PEP, with no review reasons and no prior dispositions.
  • The one linked transfer is SETTLED with no return code and a clear-band transfer score (10/34/0.36).
  • Entity-level score is unscored (skoor null), and only one of the two transfers cited in the summary is present in evidence, limiting full pattern verification.
  • Counterparty country is unknown, which is a documentation gap but not itself a signal of wrongdoing.
  • No transfer is being held, so 'release' is not applicable.

Evidence

{
  "n": 29,
  "band": "unscored",
  "skoor": null,
  "signals": [
    {
      "code": "velocity.sum_24h_gt_2x_daily_avg",
      "detail": "24h sum above 2× the program daily average",
      "weight": 10
    }
  ],
  "routeReason": "detector not auto-closable"
}

Skoor signals

SignalWeightHardDetail
velocity.sum_24h_gt_2x_daily_avg+1024h sum above 2× the program daily average

Decision

Sign in as an operator to decide. Operator sign-in →

Dispositions

No disposition yet.

Actions

Freeze, request to program, and suspend need a second, distinct approver. Clear hold, cancel, and pause execute on the requester's approval. Executed through the bank's own API with the tenant's sandbox key; a dry run when there is none.

No actions requested.