A single $9,338.74 ACH debit sits just under the $10,000 reporting threshold with no 24-hour pattern around it.

What happened. An ACH outgoing debit of $9,338.74 from Meridian Remit settled on 2026-09-04. The amount sits just under the $10,000 reporting threshold. The detector that fired is amount_just_below_threshold, and the alert summary states there is no 24-hour pattern of similar transactions around it. What the evidence shows. The transfer scored 45 (review band, confidence 1) driven by three signals: counterparty.first_time (+10), counterparty.first_time_and_large (+15), and amount.gt_10x_median (+20). The transfer has already settled with no return code. The originating entity, Meridian Remit, is a verified business, not high risk, not PEP, with no open review reasons and a screening date of 2026-07-29. The counterparty's country is listed as unknown. Program-level KRIs show several breaches (reserve_coverage_ratio, manual_review_aging_hours, ach_unauthorized_return_rate, sanctioned_country_transfers) but none of these are tied in the evidence to this specific transfer or counterparty. There are no prior dispositions on this alert. What was checked. Transfer status and return code, entity verification and risk flags, the detector's own pattern signal (24-hour window), the transfer-level skoor and its component signals, and program KRIs for any linkage to this transaction. No structuring pattern was found in the 24-hour window per the alert summary, and no independent evidence in this alert ties the transfer to the sanctioned_country_transfers or ach_unauthorized_return_rate KRI breaches. What is recommended. The transfer is settled, so no funds are in a holdable state. The single-transaction evidence here is a first-time large counterparty with an amount below the reporting threshold but no corroborating pattern of structuring. Given the verified, non-high-risk entity status and absence of a 24-hour pattern, this alert does not need a person to intervene on this specific transfer. Close the alert. Separately, the program-level KRI breaches (reserve_coverage_ratio, manual_review_aging_hours, ach_unauthorized_return_rate, sanctioned_country_transfers) warrant attention at the program level but are not evidenced as connected to this alert and should be tracked outside this disposition.

{
  "n": 871,
  "band": "review",
  "skoor": 45,
  "typology": "amount_just_below_threshold",
  "confidence": 1,
  "thresholds": {
    "maxCents": "999999",
    "minCents": "900000"
  },
  "amountCents": "933874",
  "routeReason": "detector not auto-closable"
}