SKOOR Risk Money movement. Skoored by AI.

Alert · reviewed · open

The entity's first transfer, $2,464.93, above the program median, came 0.0 hours after verification.

Detector
rapid_onboarding
Severity
medium
Program
Northwind Payroll (simulated)
Subject
transfer acht_sim_nort_7nfhripf6i
Transfer
acht_sim_nort_7nfhripf6i · $2,464.93 · ach outgoing
Skoor at alert
null unscored
Hard signal
no
Policy
policy-v1
Opened
2026-09-17 19:30Z
Closed
Decision clock
none · due — no clock
Escalated

Draft narrative

What happened. A rapid_onboarding detector fired on transfer acht_sim_nort_7nfhripf6i, an outgoing ACH credit of $2,464.93 from entity Dune LLC 03. The transfer is the entity's first, occurring 0.0 hours after verification, above the program median of $1,964.86. What the evidence shows. The transfer is already SETTLED with no return code, so there is no fund movement to hold. The entity Dune LLC 03 is VERIFIED, not high risk, not PEP, with no review reasons on file and a screening date (2026-07-07) preceding the transfer creation date (2026-07-10). The skoor is unscored (n=0, band unscored, confidence null), so no statistical risk signal supports or contradicts the alert. The counterparty's country is unknown, which is a gap but not itself flagged by any field. The program (Northwind Payroll) has a declared monthly volume of $2,500,000.00; a single $2,464.93 transfer is well within that scale. No prior dispositions exist for this entity. What was checked. Transfer status and return code, entity verification and risk flags, screening date relative to transfer date, program declared volume, skoor/band data, and prior disposition history. What is recommended. The transfer has already settled, so no funds can be held or released. The entity shows verified status with no risk flags and no adverse screening reasons. The rapid timing (0.0 hours post-verification) combined with unscored risk data means the pattern is not independently corroborated, but nothing in the evidence indicates a problem requiring action on this specific alert. Close this alert; a person should note the unscored skoor as a data gap for future monitoring rather than a basis for holding a settled transfer.
Recommendation
close
Confidence
0.62
Model
claude-sonnet-5
Drafted
2026-09-17 19:30Z
Rationale
  • Transfer status is SETTLED with no return code, ruling out hold or release actions.
  • Entity is VERIFIED, not high risk, not PEP, with no review reasons and screening predates the transfer.
  • Skoor is unscored (n=0, confidence null), so the rapid_onboarding signal lacks independent risk corroboration.
  • Transfer amount ($2,464.93) is small relative to declared program monthly volume ($2,500,000.00).
  • No prior dispositions exist to suggest a recurring pattern for this entity.
  • Counterparty country is unknown, a minor evidentiary gap but not tied to any flagged field.

Evidence

{
  "n": 0,
  "band": "unscored",
  "skoor": null,
  "typology": "rapid_onboarding",
  "confidence": null,
  "thresholds": {
    "hours": 24
  },
  "medianCents": "196486",
  "routeReason": "detector not auto-closable",
  "hoursSinceVerification": 0
}

Decision

Sign in as an operator to decide. Operator sign-in →

Dispositions

No disposition yet.

Actions

Freeze, request to program, and suspend need a second, distinct approver. Clear hold, cancel, and pause execute on the requester's approval. Executed through the bank's own API with the tenant's sandbox key; a dry run when there is none.

No actions requested.