Alert · reviewed · open
Entity velocity spiked: 2 transfers and $2,257.08 in 24 hours.
- Detector
- velocity_spike
- Severity
- medium
- Program
- Meridian Remit (simulated)
- Subject
- entity enti_sim_meri_7dj6hf539oc
- Transfer
- acht_sim_meri_31ucg7bn9ul · $1,342.15 · ach outgoing
- Skoor at alert
- null unscored
- Hard signal
- no
- Policy
- policy-v1
- Opened
- 2026-09-17 19:30Z
- Closed
- —
- Decision clock
- none · due — no clock
- Escalated
- —
Draft narrative
What happened. Alert 08dae7a0-ae80-4eea-9285-e07f5b528c2c fired on entity enti_sim_meri_7dj6hf539oc ("Dune LLC 215") for a velocity spike: 2 transfers totaling $2,257.08 in 24 hours, exceeding 2x the program daily average. The detector routed to review because it is not auto-closable; severity is medium and hard_signal is false.
What the evidence shows. The single signal driving the alert is velocity.sum_24h_gt_2x_daily_avg (weight 10). The entity-level score is unscored (skoor null, band unscored, n=29). The one transfer provided, acht_sim_meri_31ucg7bn9ul, is an ACH outgoing credit for $1,342.15, status SETTLED, with no return code, carrying a transfer-level score of 10, band clear, n=34, confidence 0.36. The entity is VERIFIED, not flagged high risk, not PEP, with no review reasons on file and last screened 2026-06-21. There are no prior dispositions on this entity.
What was checked. Reviewed the alert evidence and signal list, the program profile (Meridian Remit, declared monthly volume $1,200,000.00, rails ACH/wire/SWIFT, countries US/MX/PH), the one linked transfer's status and score, the entity's verification and risk flags, and prior disposition history. The counterparty's country is listed as unknown, and only one of the two transfers referenced in the summary is included in the evidence provided.
What is recommended. No return codes, high-risk flags, PEP status, or prior alerts are present, and the linked transfer is settled with a clear band score. The evidence is limited to a single velocity signal on an unscored entity band, and only one of the two transfers cited is documented here. This does not show a pattern requiring escalation, and the transfer in evidence has already settled, so release does not apply. Close the alert, noting the unknown counterparty country and the missing second transfer record as gaps a reviewer may want to fill before final sign-off.
- Recommendation
- close
- Confidence
- 0.58
- Model
- claude-sonnet-5
- Drafted
- 2026-09-17 19:30Z
- Rationale
- Single signal (velocity.sum_24h_gt_2x_daily_avg, weight 10) with hard_signal false and severity medium.
- Entity is VERIFIED, not high risk, not PEP, with no review reasons and no prior dispositions.
- The one linked transfer is SETTLED with no return code and a clear-band transfer score (10/34/0.36).
- Entity-level score is unscored (skoor null), and only one of the two transfers cited in the summary is present in evidence, limiting full pattern verification.
- Counterparty country is unknown, which is a documentation gap but not itself a signal of wrongdoing.
- No transfer is being held, so 'release' is not applicable.
Evidence
{
"n": 29,
"band": "unscored",
"skoor": null,
"signals": [
{
"code": "velocity.sum_24h_gt_2x_daily_avg",
"detail": "24h sum above 2× the program daily average",
"weight": 10
}
],
"routeReason": "detector not auto-closable"
}
Skoor signals
| Signal | Weight | Hard | Detail |
|---|---|---|---|
| velocity.sum_24h_gt_2x_daily_avg | +10 | 24h sum above 2× the program daily average |
Decision
Sign in as an operator to decide. Operator sign-in →
Dispositions
No disposition yet.
Actions
Freeze, request to program, and suspend need a second, distinct approver. Clear hold, cancel, and pause execute on the requester's approval. Executed through the bank's own API with the tenant's sandbox key; a dry run when there is none.
No actions requested.