The entity's first transfer, $2,745.63, above the program median, came 0.0 hours after verification.

What happened. The rapid_onboarding detector fired on the entity's first transfer, an ACH outgoing debit of $2,745.63 processed 0.0 hours after the entity's verification was completed. The transfer amount is above the program's median of $1,657.12. The transfer has already settled. What the evidence shows. The entity, Payout Agent (Northwind), is a verified US business with no high-risk flag, no PEP status, and no open review reasons; it was last screened 2026-06-27. The transfer counterparty is flagged as first-time, and its country is unknown. The program is Northwind Payroll with a declared monthly volume of $2,500,000.00 on US ACH rails; a single $2,745.63 transfer is well within that declared scale. The transfer-level score is unscored (n=2, confidence null), meaning the model has too few data points to produce a reliable band. The route reason states the detector is not auto-closable, which is why this reached review rather than closing automatically. What was checked. Verified entity status and screening history, transfer status and return code (none, settled cleanly), counterparty first-time flag, program declared volume against transfer size, and prior dispositions (none on file). The only unresolved data gap is the counterparty's country, which is listed as unknown. What is recommended. The transfer has already settled, so no hold or release applies. Nothing in the entity's verification status, screening history, or transfer size relative to declared program volume indicates a problem requiring a person to intervene before this alert can close. The unknown counterparty country is a data gap worth noting but does not by itself justify escalation given the entity's clean verification and the absence of any other risk signal. Close the alert; if the unknown counterparty country cannot be resolved through standard data enrichment, flag that gap separately for the onboarding data team rather than holding this alert open.

{
  "n": 2,
  "band": "unscored",
  "skoor": null,
  "typology": "rapid_onboarding",
  "confidence": null,
  "thresholds": {
    "hours": 24
  },
  "medianCents": "165712",
  "routeReason": "detector not auto-closable",
  "hoursSinceVerification": 0
}