The entity's first transfer, $2,305.92, above the program median, came 0.0 hours after verification.

What happened. A rapid_onboarding alert fired on entity Iris Services 020 (program Northwind Payroll) after its first ACH outgoing transfer of $2,305.92 settled 0.0 hours after the entity's verification, above the program's median transaction of $2,246.87. What the evidence shows. The transfer acht_sim_nort_5qfgb46q4e is already SETTLED with no return code. The entity is VERIFIED, not high risk, not PEP, with no review reasons on file, screened 2026-06-25. The transfer skoor is unscored (n=0, confidence null), and the alert itself carries no hard signal and is unscored (band unscored). The $2,305.92 amount is well within the program's declared monthly volume of $2,500,000.00. Counterparty country is listed as unknown, which is a data gap but not itself a flagged risk factor in the evidence provided. There are no prior dispositions on this entity or alert. What was checked. Transfer status and return code, entity verification and risk flags (high risk, PEP, review reasons), program declared volume versus transaction size, alert scoring fields, and prior disposition history. No scoring model output is available (n=0, skoor null) to weigh against the timing pattern. What is recommended. Because the transfer has already settled, there is no fund movement to hold or release. The entity shows no independent risk indicators (not high risk, not PEP, verified, no review reasons), and the amount is small relative to declared program volume. The only anomaly is the 0-hour gap between verification and first transfer, which the detector is designed to flag but which alone, absent other signals, does not indicate a person needs to intervene. Confidence is limited by the unscored model output and the unknown counterparty country, so this should close with a note that counterparty country data should be completed if available, rather than as a required follow-up action.

{
  "n": 0,
  "band": "unscored",
  "skoor": null,
  "typology": "rapid_onboarding",
  "confidence": null,
  "thresholds": {
    "hours": 24
  },
  "medianCents": "224687",
  "routeReason": "detector not auto-closable",
  "hoursSinceVerification": 0
}