SKOOR Risk Money movement. Skoored by AI.

Alert · reviewed · open

Entity velocity spiked: 1 transfers and $485.73 in 24 hours.

Detector
velocity_spike
Severity
medium
Program
Meridian Remit (simulated)
Subject
entity enti_sim_meri_zfaci2z9lw
Transfer
acht_sim_meri_bcn5nsqc9pz · $641.38 · ach outgoing
Skoor at alert
null unscored
Hard signal
no
Policy
policy-v1
Opened
2026-09-17 19:30Z
Closed
Decision clock
none · due — no clock
Escalated

Draft narrative

What happened. A velocity_spike alert fired for entity enti_sim_meri_zfaci2z9lw under program Meridian Remit, citing 1 transfer totaling $485.73 in a 24-hour window, exceeding 2x the program's average daily volume. What the evidence shows. The only transfer detail provided is acht_sim_meri_bcn5nsqc9pz, an ACH outgoing debit of $641.38, settled, with counterparty country unknown and no return code. This transfer was created 2026-07-10, which does not align with the alert's 24-hour window ending near the alert open time of 2026-09-17, and its amount ($641.38) does not match the summary's cited $485.73. The transfer itself carries no adverse signal beyond the single velocity flag (weight 10). The transfer-level score is unscored (n=0, confidence null), and the alert-level score is likewise unscored. The entity is a verified business, not flagged high risk, not PEP, with no review reasons and a screening date of 2026-05-20. There are no prior dispositions on this entity. What was checked. Reviewed the alert summary and evidence signal, the single linked transfer's status and counterparty detail, the transfer-level and alert-level scoring fields, the entity's verification and risk flags, the program's declared volume and rails, and prior disposition history. What is recommended. Close the alert. The evidence is limited to one low-dollar, settled ACH transfer with no return code, from a verified, non-high-risk, non-PEP entity with no review history. The velocity signal is a single weight-10 flag with no corroborating adverse indicators, and the transfer is already settled so there is no fund-movement decision pending. The mismatch between the alert's cited transfer date/amount and the linked transfer record should be noted for data-quality follow-up but does not itself indicate a risk pattern requiring escalation.
Recommendation
close
Confidence
0.60
Model
claude-sonnet-5
Drafted
2026-09-17 19:30Z
Rationale
  • Single signal present (velocity.sum_24h_gt_2x_daily_avg, weight 10); no hard signal flagged.
  • Entity is VERIFIED, not high risk, not PEP, with no review reasons on file.
  • Linked transfer is SETTLED with no return code, indicating no execution or compliance failure.
  • No prior dispositions exist to suggest a recurring or escalating pattern.
  • Transfer-level and alert-level scores are unscored (n=0), reflecting thin scoring data, which lowers confidence but does not itself indicate risk.
  • Discrepancy between alert summary ($485.73, 1 transfer in 24h) and the linked transfer record ($641.38, dated 2026-07-10) suggests a data-linkage or timing issue rather than a substantive velocity event, but this could not be independently resolved from the evidence provided.

Evidence

{
  "n": 0,
  "band": "unscored",
  "skoor": null,
  "signals": [
    {
      "code": "velocity.sum_24h_gt_2x_daily_avg",
      "detail": "24h sum above 2× the program daily average",
      "weight": 10
    }
  ],
  "routeReason": "detector not auto-closable"
}

Skoor signals

SignalWeightHardDetail
velocity.sum_24h_gt_2x_daily_avg+1024h sum above 2× the program daily average

Decision

Sign in as an operator to decide. Operator sign-in →

Dispositions

No disposition yet.

Actions

Freeze, request to program, and suspend need a second, distinct approver. Clear hold, cancel, and pause execute on the requester's approval. Executed through the bank's own API with the tenant's sandbox key; a dry run when there is none.

No actions requested.