First transfer to a new counterparty, $838.46, above the program's 95th percentile.

What happened. A first-time transfer to a new counterparty for $838.46 was flagged because the amount exceeds the program's 95th percentile threshold for first-time counterparty transfers. The transfer has already settled (status COMPLETED). What the evidence shows. The transfer is an outgoing ACH credit of $838.46 with no return code. The two signals present are counterparty.first_time (+10) and counterparty.first_time_and_large (+15), both driven by the amount exceeding the p95 figure of $618.03. The transfer skoor is null/unscored (n=4), so no model-based risk score is available. The subject entity, Grove Co 218, is VERIFIED, not high risk, not PEP, with no open review reasons and a recent screening date (2026-08-27). The counterparty's country is unknown, which is a gap in the record but not itself a signal in this alert. There is no prior disposition history for this entity or counterparty. What was checked. Reviewed the transfer record, entity verification status and screening recency, the two weighted signals attached to this alert, and program-level KRIs. Program KRIs show breaches in reserve_coverage_ratio, ach_unauthorized_return_rate, and sanctioned_country_transfers, and a watch level on manual_review_aging_hours and pep_flagged_entities. These are program-wide metrics and the evidence here does not link this specific transfer or counterparty to any of them (return code is none, counterparty country is unknown rather than flagged as sanctioned, entity is not PEP-flagged). What is recommended. Close this alert. The transfer has already completed, so a hold or release recommendation does not apply. The entity is verified with clean screening history, the transfer carries no return code, and the only signals are amount-based (first-time large counterparty), which is a detection pattern rather than a substantiated risk indicator. The unknown counterparty country should be logged as a data-quality gap for the counterparty record, but it does not by itself justify escalation given the entity's clean verification and screening status. A person should confirm the counterparty country can be resolved for future screening completeness, but no funds action is needed here.

{
  "n": 4,
  "band": "unscored",
  "skoor": null,
  "signals": [
    {
      "code": "counterparty.first_time",
      "detail": "first transfer with this counterparty",
      "weight": 10
    },
    {
      "code": "counterparty.first_time_and_large",
      "detail": "amount above the program p95 (61803)",
      "weight": 15
    }
  ],
  "routeReason": "detector always reviewed"
}