Alert · reviewed · open
The entity's first transfer, $654.07, above the program median, came 0.0 hours after verification.
- Detector
- rapid_onboarding
- Severity
- medium
- Program
- Harbor Marketplace Payouts (simulated)
- Subject
- transfer acht_sim_harb_c0j8so0f42v
- Transfer
- acht_sim_harb_c0j8so0f42v · $654.07 · ach outgoing
- Skoor at alert
- null unscored
- Hard signal
- no
- Policy
- policy-v1
- Opened
- 2026-09-17 19:30Z
- Closed
- —
- Decision clock
- none · due — no clock
- Escalated
- —
Draft narrative
What happened. A rapid_onboarding detector fired on the first transfer for entity enti_sim_harb_3ijt1t3u3xa under the Harbor Marketplace Payouts program. The transfer, an outgoing ACH credit of $654.07, settled and occurred 0.0 hours after the entity's verification, which is above the 24-hour threshold used by the detector and above the program's median transfer amount of $463.32.
What the evidence shows. The transfer status is SETTLED with no return code, indicating no processing failure. The entity is VERIFIED, not flagged high risk, not PEP, and has no review reasons on file, with screening dated 2026-06-27. The transfer-level score is unscored (skoor null, band unscored, n=4, confidence null), so no scored risk signal supports or contradicts the alert. Hard signal is false. Prior dispositions for this entity: none. The counterparty's country is unknown, which is a data gap but not itself an adverse finding since no return code or dispute is present.
What was checked. Program declared volume ($4,000,000.00/month) and rails (ach, realtime, US) against the single transfer amount; verification timestamp against transfer creation timestamp; entity risk flags (high risk, PEP, review reasons); transfer settlement status and return code; scoring band and sample size (n=4); prior dispositions.
What is recommended. No funds are pending action since the transfer already settled. Given the entity is verified with no adverse risk flags, no return code, and no prior disposition history, there is no indication of a problem requiring intervention on this single transfer. However, the scoring is unscored with only n=4 observations and the counterparty country is unknown, so confidence in ruling this out entirely is limited. Close this alert, but note the thin scoring basis for the record.
- Recommendation
- close
- Confidence
- 0.58
- Model
- claude-sonnet-5
- Drafted
- 2026-09-17 19:30Z
- Rationale
- Transfer status is SETTLED with no return code, so no failed or disputed movement is present.
- Entity is VERIFIED, not high risk, not PEP, and has no review reasons on file.
- No prior dispositions exist for this entity to suggest a repeated pattern.
- Hard signal is false, and the alert's own scoring is unscored (skoor null, n=4), meaning the model provides no independent confirmation of risk.
- Amount above median and zero-hour gap after verification are the only concrete anomalies, and by themselves do not indicate misconduct absent other adverse signals.
- Counterparty country is unknown, which limits full verification of counterparty risk and is the main reason confidence is not higher.
Evidence
{
"n": 4,
"band": "unscored",
"skoor": null,
"typology": "rapid_onboarding",
"confidence": null,
"thresholds": {
"hours": 24
},
"medianCents": "46332",
"routeReason": "detector not auto-closable",
"hoursSinceVerification": 0
}
Decision
Sign in as an operator to decide. Operator sign-in →
Dispositions
No disposition yet.
Actions
Freeze, request to program, and suspend need a second, distinct approver. Clear hold, cancel, and pause execute on the requester's approval. Executed through the bank's own API with the tenant's sandbox key; a dry run when there is none.
No actions requested.