SKOOR Risk Money movement. Skoored by AI.

Alert · reviewed · open

Activity on an entity flagged by screening (PEP status no, high risk).

Detector
sanctions_or_pep
Severity
high
Program
Lantern Lending (simulated)
Subject
entity enti_sim_lant_6uvwvng8cjh
Transfer
acht_sim_lant_151byyv8d2q · $1,099.83 · ach outgoing
Skoor at alert
20 clear
Hard signal
no
Policy
policy-v1
Opened
2026-09-17 19:30Z
Closed
Decision clock
none · due — no clock
Escalated

Draft narrative

What happened. Alert 65d7391c-c0cb-45a1-a337-f3f37f77d286 fired on entity enti_sim_lant_6uvwvng8cjh under the sanctions_or_pep detector following a $1,099.83 USD outgoing ACH debit (acht_sim_lant_151byyv8d2q) that settled on 2026-07-27. The detector always routes to review, and severity is marked high, but the alert score is 20 in the clear band with hard_signal false. What the evidence shows. The only scoring signal present is entity.high_risk (+20), reflecting that screening marked the entity high risk. The entity record shows verification VERIFIED, pep no, review reasons none, and last screened 2026-06-26T12:01:30.000Z. The transfer itself carries the same clear-band score (20) and no additional signals. It settled with return code none, so there is no indication of a failed or reversed payment. Counterparty country is listed as unknown, which is a data gap but not itself a signal in the evidence. Program KRIs are mostly ok; three are flagged watch or breach (hold_aging_hours watch, pep_flagged_entities watch, manual_review_aging_hours breach), but none of these are tied to this specific entity or transfer in the evidence provided. What was checked. Reviewed the alert score and band, the single contributing signal, the entity's verification and PEP/review status, the transfer's settlement status and return code, and the program KRI panel for any linkage to this subject. Prior dispositions: none on file. What is recommended. No transfer hold is indicated since the transfer already settled and no hard signal or elevated band is present. The entity is verified, not PEP, has no open review reasons, and was screened within the last two months. Recommend closing this alert. The manual_review_aging_hours breach at the program level is noted separately as a program-level KRI concern and is not, on the evidence here, attributable to this specific alert or entity; it may warrant independent program-level attention outside this alert's disposition.
Recommendation
close
Confidence
0.78
Model
claude-sonnet-5
Drafted
2026-09-17 19:30Z
Rationale
  • Alert score 20 falls in the clear band and hard_signal is false.
  • Only one contributing signal (entity.high_risk +20) is present; no PEP, sanctions match, or adverse review reasons.
  • Entity is VERIFIED, pep no, review reasons none, last screened within the last two months.
  • Transfer already SETTLED with return code none; recommending release would not apply since funds already moved and nothing in evidence suggests reversal is needed.
  • Program KRI watch/breach items (hold_aging_hours, pep_flagged_entities, manual_review_aging_hours) are not linked in the evidence to this specific entity or transfer, so they do not independently justify escalation of this alert.
  • Counterparty country unknown is a data completeness gap, not a scored risk signal in this evidence set, and is noted but does not change the recommendation given the otherwise clear scoring.

Evidence

{
  "n": 187,
  "band": "clear",
  "skoor": 20,
  "signals": [
    {
      "code": "entity.high_risk",
      "detail": "entity marked high risk by screening",
      "weight": 20
    }
  ],
  "routeReason": "detector always reviewed"
}

Skoor signals

SignalWeightHardDetail
entity.high_risk+20entity marked high risk by screening

Decision

Sign in as an operator to decide. Operator sign-in →

Dispositions

No disposition yet.

Actions

Freeze, request to program, and suspend need a second, distinct approver. Clear hold, cancel, and pause execute on the requester's approval. Executed through the bank's own API with the tenant's sandbox key; a dry run when there is none.

No actions requested.