Alert · reviewed · open

The entity's first transfer, $568.88, above the program median, came 0.0 hours after verification.

Detector: rapid_onboarding
Severity: medium
Program: Meridian Remit (simulated)
Subject: transfer acht_sim_meri_ai55shqu9qv
Transfer: acht_sim_meri_ai55shqu9qv · $568.88 · ach outgoing
Skoor at alert: null unscored
Hard signal: no
Policy: policy-v1
Opened: 2026-09-17 19:30Z
Closed: —
Decision clock: none · due — no clock
Escalated: —

Draft narrative

What happened. The rapid_onboarding detector fired on the entity's first transfer, an outgoing ACH credit of $568.88, which posted 0.0 hours after the entity's verification was completed. The transfer has since settled. What the evidence shows. The transfer amount ($568.88) is above the program median of $563.56 but not by a large margin. The transfer status is SETTLED with no return code, indicating no rail-level failure or rejection. The entity is a verified BUSINESS ("Payout Agent (Meridian)"), not flagged high risk, not PEP, with no review reasons on file and a screening date of 2026-06-27 predating this transfer. There are no prior dispositions on this entity. The transfer-level skoor is unscored with n=0 and null confidence, meaning there is no behavioral history to compare this transaction against. What was checked. Program declared volume and rails, entity verification and risk flags, counterparty record (country unknown but no adverse flags present), transfer status and return code, and prior disposition history. No hard signal was present on the alert. What is recommended. Given the transfer has already settled and no derogatory evidence exists (no high-risk flag, no PEP, no review reasons, clean settlement, only modest excess over median), no intervention on funds is possible or warranted. The alert can be closed. Confidence is limited by the unscored/n=0 status, which reflects thin transaction history rather than any specific concern, so this should be revisited if the entity's next transfers show a similar or escalating pattern.

Recommendation

Confidence

0.62

Model

claude-sonnet-5

Drafted

2026-09-17 19:30Z

Rationale

Transfer status is SETTLED with no return code; there is no pending transfer to hold or release.
Entity is VERIFIED, not high risk, not PEP, with no open review reasons.
Amount is above program median but not extreme, and this is a single first transaction with no history (n=0) to establish a pattern.
No prior dispositions exist on this entity to suggest a recurring issue.
Skoor is unscored due to insufficient transaction history, not due to any adverse finding, which limits certainty but does not itself indicate risk.

Evidence

{
  "n": 0,
  "band": "unscored",
  "skoor": null,
  "typology": "rapid_onboarding",
  "confidence": null,
  "thresholds": {
    "hours": 24
  },
  "medianCents": "56356",
  "routeReason": "detector not auto-closable",
  "hoursSinceVerification": 0
}

Decision

Dispositions

No disposition yet.

Actions

Freeze, request to program, and suspend need a second, distinct approver. Clear hold, cancel, and pause execute on the requester's approval. Executed through the bank's own API with the tenant's sandbox key; a dry run when there is none.

No actions requested.