SKOOR Risk Money movement. Skoored by AI.

Alert · reviewed · open

The entity's first transfer, $654.07, above the program median, came 0.0 hours after verification.

Detector
rapid_onboarding
Severity
medium
Program
Harbor Marketplace Payouts (simulated)
Subject
transfer acht_sim_harb_c0j8so0f42v
Transfer
acht_sim_harb_c0j8so0f42v · $654.07 · ach outgoing
Skoor at alert
null unscored
Hard signal
no
Policy
policy-v1
Opened
2026-09-17 19:30Z
Closed
Decision clock
none · due — no clock
Escalated

Draft narrative

What happened. A rapid_onboarding detector fired on the first transfer for entity enti_sim_harb_3ijt1t3u3xa under the Harbor Marketplace Payouts program. The transfer, an outgoing ACH credit of $654.07, settled and occurred 0.0 hours after the entity's verification, which is above the 24-hour threshold used by the detector and above the program's median transfer amount of $463.32. What the evidence shows. The transfer status is SETTLED with no return code, indicating no processing failure. The entity is VERIFIED, not flagged high risk, not PEP, and has no review reasons on file, with screening dated 2026-06-27. The transfer-level score is unscored (skoor null, band unscored, n=4, confidence null), so no scored risk signal supports or contradicts the alert. Hard signal is false. Prior dispositions for this entity: none. The counterparty's country is unknown, which is a data gap but not itself an adverse finding since no return code or dispute is present. What was checked. Program declared volume ($4,000,000.00/month) and rails (ach, realtime, US) against the single transfer amount; verification timestamp against transfer creation timestamp; entity risk flags (high risk, PEP, review reasons); transfer settlement status and return code; scoring band and sample size (n=4); prior dispositions. What is recommended. No funds are pending action since the transfer already settled. Given the entity is verified with no adverse risk flags, no return code, and no prior disposition history, there is no indication of a problem requiring intervention on this single transfer. However, the scoring is unscored with only n=4 observations and the counterparty country is unknown, so confidence in ruling this out entirely is limited. Close this alert, but note the thin scoring basis for the record.
Recommendation
close
Confidence
0.58
Model
claude-sonnet-5
Drafted
2026-09-17 19:30Z
Rationale
  • Transfer status is SETTLED with no return code, so no failed or disputed movement is present.
  • Entity is VERIFIED, not high risk, not PEP, and has no review reasons on file.
  • No prior dispositions exist for this entity to suggest a repeated pattern.
  • Hard signal is false, and the alert's own scoring is unscored (skoor null, n=4), meaning the model provides no independent confirmation of risk.
  • Amount above median and zero-hour gap after verification are the only concrete anomalies, and by themselves do not indicate misconduct absent other adverse signals.
  • Counterparty country is unknown, which limits full verification of counterparty risk and is the main reason confidence is not higher.

Evidence

{
  "n": 4,
  "band": "unscored",
  "skoor": null,
  "typology": "rapid_onboarding",
  "confidence": null,
  "thresholds": {
    "hours": 24
  },
  "medianCents": "46332",
  "routeReason": "detector not auto-closable",
  "hoursSinceVerification": 0
}

Decision

Sign in as an operator to decide. Operator sign-in →

Dispositions

No disposition yet.

Actions

Freeze, request to program, and suspend need a second, distinct approver. Clear hold, cancel, and pause execute on the requester's approval. Executed through the bank's own API with the tenant's sandbox key; a dry run when there is none.

No actions requested.