Activity on an entity flagged by screening (PEP status no, high risk).

What happened. Alert 4f03cfa8-0de3-4c38-b836-106f1b04bf89 was opened on 2026-09-17 by the sanctions_or_pep detector, which reviews this entity because it is flagged high risk by screening. The subject is entity enti_sim_meri_5if3mzfr9pn, a verified US business. The evidence attached is one settled ACH outgoing debit of $858.04 to a first-time counterparty with an unknown country, created 2026-08-02. What the evidence shows. The entity screening shows pep: no, high_risk: true, verification: VERIFIED, review reasons: none, last screened 2026-06-26. The alert score is 30 (band review) with hard_signal false. The transfer itself also scored 30/review, driven by entity.high_risk (+20) and counterparty.first_time (+10). The route reason states this detector always reviews high-risk entities, indicating routine screening rather than a specific sanctions match. The transfer status is SETTLED with no return code, so no funds are currently held. Program KRIs show high_risk_entity_share at 3.3% (ok), sanctioned_country_transfers at 0 (ok), stale_screening_share at 0 (ok), and verification_denial_rate at 3.3% (ok). pep_flagged_entities is 1 of 30 (watch) but this entity itself is not PEP. What was checked. Entity screening status and review reasons, transfer status and return code, transfer-level risk signals, and program-level KRIs for sanctioned-country activity, screening staleness, and high-risk concentration. No prior dispositions exist for this alert. What is recommended. Close the alert. The entity is verified, has no PEP status, no open review reasons, and screening is current. The single associated transfer settled without a return and without any sanctioned-country or hard-signal indicator. The high-risk flag alone triggers automatic review by design (routeReason), and no evidence here points to an unresolved sanctions concern. The counterparty's unknown country is a minor gap and should be captured for future screening improvement but does not itself warrant holding funds already settled.

{
  "n": 364,
  "band": "review",
  "skoor": 30,
  "signals": [
    {
      "code": "entity.high_risk",
      "detail": "entity marked high risk by screening",
      "weight": 20
    }
  ],
  "routeReason": "detector always reviewed"
}