SKOOR Risk Money movement. Skoored by AI.

Alert · reviewed · open

The entity's first transfer, $3,973.82, above the program median, came 0.0 hours after verification.

Detector
rapid_onboarding
Severity
medium
Program
Northwind Payroll (simulated)
Subject
transfer acht_sim_nort_92town8d4a
Transfer
acht_sim_nort_92town8d4a · $3,973.82 · ach outgoing
Skoor at alert
null unscored
Hard signal
no
Policy
policy-v1
Opened
2026-09-17 19:30Z
Closed
Decision clock
none · due — no clock
Escalated

Draft narrative

What happened. Alert 8ef926e5-c959-44a4-af6b-88d82d13a049 fired on detector rapid_onboarding for transfer acht_sim_nort_92town8d4a, an outgoing ACH credit of $3,973.82 from entity Kestrel Partners 022. The evidence field shows this was the entity's first transfer, occurring 0.0 hours after verification, and above the program median of $1,955.42. What the evidence shows. The transfer is SETTLED with no return code, indicating it processed without failure. The entity is BUSINESS-verified, not high risk, not PEP, has no review reasons on file, and was last screened 2026-06-28, within a normal screening window. The transfer amount, $3,973.82, is well below the program's declared monthly volume of $2,500,000.00. The transfer-level skoor is null with band unscored and n=0, meaning no statistical model output backs this alert; hard_signal is false. Counterparty country is listed as unknown, which is a data gap but is not flagged as a review reason by the entity record. There are no prior dispositions on this entity. What was checked. Reviewed the alert evidence block (thresholds, medianCents, hoursSinceVerification), the transfer record (status, return code, amount), the program declared volume, the entity verification status and screening date, and prior disposition history. No hard signal was present and no scoring band was available to corroborate the detector's trigger. What is recommended. Close the alert. The transfer has already settled with no return code, the entity is verified with no adverse screening or PEP findings, and the amount is small relative to the program's declared volume. The rapid-onboarding pattern alone, with an unscored, n=0 model output and no hard signal, does not present evidence requiring further review. The counterparty country gap should be noted for data quality but does not on its own warrant escalation or hold, since the transfer cannot be held after settlement.
Recommendation
close
Confidence
0.62
Model
claude-sonnet-5
Drafted
2026-09-17 19:30Z
Rationale
  • Transfer status is SETTLED with no return code; there is no pending movement to hold or release.
  • Entity is VERIFIED, not high risk, not PEP, with no review reasons and a recent screening date.
  • Transfer amount ($3,973.82) is small relative to the program's declared monthly volume ($2,500,000.00).
  • Detector evidence shows hard_signal false and an unscored band with n=0, meaning no statistical corroboration for the rapid_onboarding flag.
  • Counterparty country is unknown, which is a minor data gap but not flagged as a review reason and does not by itself indicate a pattern warranting escalation.
  • No prior dispositions exist on this entity to suggest a recurring or escalating issue.

Evidence

{
  "n": 0,
  "band": "unscored",
  "skoor": null,
  "typology": "rapid_onboarding",
  "confidence": null,
  "thresholds": {
    "hours": 24
  },
  "medianCents": "195542",
  "routeReason": "detector not auto-closable",
  "hoursSinceVerification": 0
}

Decision

Sign in as an operator to decide. Operator sign-in →

Dispositions

No disposition yet.

Actions

Freeze, request to program, and suspend need a second, distinct approver. Clear hold, cancel, and pause execute on the requester's approval. Executed through the bank's own API with the tenant's sandbox key; a dry run when there is none.

No actions requested.