Transaction Risk Skoor 40 (review band) on a $1,533.08 ach transfer: returns.counterparty_prior_unauthorized.

What happened. An ACH outgoing credit transfer of $1,533.08 from entity Birch Holdings 31 (program Lantern Lending) settled on 2026-08-30 and was flagged by the skoor_review detector at a risk score of 40 (review band) due to a single prior unauthorized return associated with the counterparty. What the evidence shows. The transfer has already settled with no return code recorded, meaning no funds are currently held or reversible through this alert. The sole risk signal is returns.counterparty_prior_unauthorized, weighted 40, based on 1 prior unauthorized return for counterparty cpty_sim_lant_asr3v7ggcjp. The counterparty's country is unknown, and there is no further detail on the prior unauthorized return's date, amount, or resolution. The subject entity is VERIFIED, not high risk, not PEP, with no open review reasons, and was last screened 2026-08-18. Program-level KRIs show ach_unauthorized_return_rate at 0 (n=219, ok), meaning this alert does not appear reflected in a broader unauthorized-return trend at the program level. Two KRIs show breach/watch status: manual_review_aging_hours (breach, n=6) and hold_aging_hours (watch, n=2), and pep_flagged_entities is at watch (1 of 33), but none of these directly connect to this transfer or counterparty. What was checked. Transfer status and return code, program KRIs for unauthorized/administrative/overall return rates, entity verification status and screening date, and prior dispositions on this alert (none found). No additional detail is present in the evidence for the nature or timing of the counterparty's prior unauthorized return. What is recommended. Since the transfer has already settled and there is no held transfer to release or block, no immediate funds-control action applies. However, the single unauthorized-return signal on this counterparty, combined with unknown counterparty country and no detail on the prior return, is a fact pattern a person should review before this counterparty is used again. Recommend a person review the counterparty's transaction history and prior unauthorized return before closing.

{
  "n": 587,
  "band": "review",
  "skoor": 40,
  "signals": [
    {
      "code": "returns.counterparty_prior_unauthorized",
      "detail": "1 prior unauthorized return(s)",
      "weight": 40
    }
  ],
  "confidence": 1,
  "routeReason": "detector not auto-closable"
}