Alert · reviewed · open
Entity velocity spiked: 6 transfers and $3,356.46 in 24 hours.
- Detector
- velocity_spike
- Severity
- medium
- Program
- Harbor Marketplace Payouts (simulated)
- Subject
- entity enti_sim_harb_7n4e3h7n3xe
- Transfer
- acht_sim_harb_3pd01wbd6nn · $782.28 · ach outgoing
- Skoor at alert
- 25 clear
- Hard signal
- no
- Policy
- policy-v1
- Opened
- 2026-09-17 19:31Z
- Closed
- —
- Decision clock
- none · due — no clock
- Escalated
- —
Draft narrative
What happened. A ach outgoing credit transfer of $782.28 (acht_sim_harb_3pd01wbd6nn) on program Harbor Marketplace Payouts (simulated) was flagged by detector velocity_spike: Entity velocity spiked: 6 transfers and $3,356.46 in 24 hours..
What the evidence shows. Transaction Risk Skoor 25 (band clear). Signals: returns.counterparty_prior_any (+15), velocity.count_24h_gt_5 (+10). Entity Reconciliation Agent (Harbor): verification VERIFIED, PEP no, high risk no.
What was checked. Program KRIs as of the latest snapshot: frozen_accounts ok, hold_aging_hours watch, overdraft_events ok, manual_review_rate ok, card_fraud_declines unmeasured, pep_flagged_entities watch, velocity_vs_declared unmeasured, stale_screening_share ok, high_risk_entity_share watch, reserve_coverage_ratio ok, ach_overall_return_rate ok, verification_denial_rate ok, manual_review_aging_hours breach, ach_unauthorized_return_rate breach, sanctioned_country_transfers ok, ach_administrative_return_rate ok, counterparty_concentration_top1 ok. No prior dispositions on this entity or counterparty.
What is recommended. Recommended: close. A person decides; this draft was assembled from the evidence without a model (model call failed).
- Recommendation
- close
- Confidence
- null (template, no model)
- Model
- none (template)
- Drafted
- 2026-09-17 19:31Z
- Rationale
- Template draft: recommendation follows the band and the hard-signal rule only.
Evidence
{
"n": 1033,
"band": "clear",
"skoor": 25,
"signals": [
{
"code": "velocity.count_24h_gt_5",
"detail": "6 transfers in 24h",
"weight": 10
}
],
"routeReason": "detector not auto-closable"
}
Skoor signals
| Signal | Weight | Hard | Detail |
|---|---|---|---|
| returns.counterparty_prior_any | +15 | 1 prior return(s) other than NSF | |
| velocity.count_24h_gt_5 | +10 | 6 transfers in 24h |
Decision
Sign in as an operator to decide. Operator sign-in →
Dispositions
No disposition yet.
Actions
Freeze, request to program, and suspend need a second, distinct approver. Clear hold, cancel, and pause execute on the requester's approval. Executed through the bank's own API with the tenant's sandbox key; a dry run when there is none.
No actions requested.