Alert · reviewed · held

Transaction Risk Skoor 75 (hold band) on a $1,112.62 ach transfer: returns.counterparty_prior_unauthorized, structuring.pattern.

Detector: skoor_hold
Severity: high
Program: Meridian Remit (simulated)
Subject: transfer acht_sim_meri_9c7yzpdfbz9
Transfer: acht_sim_meri_9c7yzpdfbz9 · $1,112.62 · ach outgoing
Skoor at alert: 75 hold
Hard signal: yes
Policy: policy-v1
Opened: 2026-09-17 19:32Z
Closed: —
Decision clock: none · due — no clock
Escalated: —

Draft narrative

What happened. A ach outgoing debit transfer of $1112.62 (acht_sim_meri_9c7yzpdfbz9) on program Meridian Remit (simulated) was flagged by detector skoor_hold: Transaction Risk Skoor 75 (hold band) on a $1,112.62 ach transfer: returns.counterparty_prior_unauthorized, structuring.pattern.. What the evidence shows. Transaction Risk Skoor 75 (band hold). Signals: returns.counterparty_prior_unauthorized (+40), structuring.pattern (+35, hard). Entity Meridian Remit: verification VERIFIED, PEP no, high risk no. What was checked. Program KRIs as of the latest snapshot: frozen_accounts ok, hold_aging_hours watch, overdraft_events ok, manual_review_rate ok, card_fraud_declines unmeasured, pep_flagged_entities watch, velocity_vs_declared ok, stale_screening_share ok, high_risk_entity_share ok, reserve_coverage_ratio breach, ach_overall_return_rate ok, verification_denial_rate ok, manual_review_aging_hours breach, ach_unauthorized_return_rate breach, sanctioned_country_transfers breach, ach_administrative_return_rate ok, counterparty_concentration_top1 ok. No prior dispositions on this entity or counterparty. What is recommended. Recommended: hold. A person decides; this draft was assembled from the evidence without a model (model output did not match the schema).

Recommendation

hold

Confidence

null (template, no model)

Model

none (template)

Drafted

2026-09-17 19:32Z

Rationale

Template draft: recommendation follows the band and the hard-signal rule only.

Evidence

{
  "n": 897,
  "band": "hold",
  "skoor": 75,
  "signals": [
    {
      "code": "returns.counterparty_prior_unauthorized",
      "detail": "1 prior unauthorized return(s)",
      "weight": 40
    },
    {
      "code": "structuring.pattern",
      "hard": true,
      "detail": "2 debits just under $10,000 in 24h",
      "weight": 35
    }
  ],
  "autoHold": true,
  "confidence": 1,
  "routeReason": "hard signal"
}

Skoor signals

Signal	Weight	Hard	Detail
returns.counterparty_prior_unauthorized	+40		2 prior unauthorized return(s)
structuring.pattern	+35	yes	2 debits just under $10,000 in 24h

Decision

Dispositions

No disposition yet.

Actions

Freeze, request to program, and suspend need a second, distinct approver. Clear hold, cancel, and pause execute on the requester's approval. Executed through the bank's own API with the tenant's sandbox key; a dry run when there is none.

No actions requested.