SKOOR Risk Money movement. Skoored by AI.

Alert · reviewed · open

Entity velocity spiked: 8 transfers and $14,303.27 in 24 hours.

Detector
velocity_spike
Severity
medium
Program
Northwind Payroll (simulated)
Subject
entity enti_sim_nort_33z4ba6xy
Transfer
acht_sim_nort_b9rliy0p3sx · $893.64 · ach outgoing
Skoor at alert
10 clear
Hard signal
no
Policy
policy-v1
Opened
2026-09-17 19:32Z
Closed
Decision clock
none · due — no clock
Escalated

Draft narrative

What happened. A ach outgoing credit transfer of $893.64 (acht_sim_nort_b9rliy0p3sx) on program Northwind Payroll (simulated) was flagged by detector velocity_spike: Entity velocity spiked: 8 transfers and $14,303.27 in 24 hours.. What the evidence shows. Transaction Risk Skoor 10 (band clear). Signals: velocity.count_24h_gt_5 (+10). Entity Birch Holdings 01: verification VERIFIED, PEP no, high risk no. What was checked. Program KRIs as of the latest snapshot: frozen_accounts ok, hold_aging_hours watch, overdraft_events ok, manual_review_rate ok, card_fraud_declines unmeasured, pep_flagged_entities watch, velocity_vs_declared ok, stale_screening_share ok, high_risk_entity_share watch, reserve_coverage_ratio ok, ach_overall_return_rate ok, verification_denial_rate ok, manual_review_aging_hours breach, ach_unauthorized_return_rate ok, sanctioned_country_transfers ok, ach_administrative_return_rate ok, counterparty_concentration_top1 ok. No prior dispositions on this entity or counterparty. What is recommended. Recommended: close. A person decides; this draft was assembled from the evidence without a model (model output did not match the schema).
Recommendation
close
Confidence
null (template, no model)
Model
none (template)
Drafted
2026-09-17 19:32Z
Rationale
  • Template draft: recommendation follows the band and the hard-signal rule only.

Evidence

{
  "n": 1366,
  "band": "clear",
  "skoor": 10,
  "signals": [
    {
      "code": "velocity.count_24h_gt_5",
      "detail": "8 transfers in 24h",
      "weight": 10
    }
  ],
  "routeReason": "detector not auto-closable"
}

Skoor signals

SignalWeightHardDetail
velocity.count_24h_gt_5+108 transfers in 24h

Decision

Sign in as an operator to decide. Operator sign-in →

Dispositions

No disposition yet.

Actions

Freeze, request to program, and suspend need a second, distinct approver. Clear hold, cancel, and pause execute on the requester's approval. Executed through the bank's own API with the tenant's sandbox key; a dry run when there is none.

No actions requested.