Transaction Risk Skoor 55 (hold band) on a $9,457.89 ach transfer: amount.gt_10x_median, structuring.pattern.

What happened. Alert a9ca1e31-6540-4cad-b058-c90d0b021558 fired on transfer acht_sim_meri_am0xo0b1cdr, an outgoing ACH debit of $9,457.89 from Meridian Remit (simulated). The transaction risk skoor was 55, placing it in the hold band, with a hard signal present. The alert was auto-held per the evidence but the transfer record shows status SETTLED, meaning the funds have already moved. What the evidence shows. Two signals drove the score: amount.gt_10x_median (weight 20, amount exceeds 10x the program median of $674.32) and structuring.pattern (weight 35, hard signal, two debits just under $10,000 within 24 hours). The structuring signal is marked hard with confidence 1.0 across n=886 observations. The counterparty cpty_sim_meri_73i0nx8nc6o has an unknown country, and the transfer carries no return code. The entity Meridian Remit is VERIFIED, not high risk, not PEP, screened 2026-07-29. Program-level KRIs show three breaches: reserve_coverage_ratio (0.648), manual_review_aging_hours (1146.87), sanctioned_country_transfers (1 of 746), and ach_unauthorized_return_rate (0.0115), alongside two watch-level KRIs (hold_aging_hours, pep_flagged_entities). What was checked. Reviewed the transfer record, entity verification status, program declared volume and KRI panel, and prior dispositions. No prior dispositions exist for this alert or entity. The transfer status is SETTLED, so there is no pending hold to release. Counterparty country is unknown, which limits assessment of the sanctioned_country_transfers breach in relation to this specific transfer. What is recommended. The transfer has already settled, so no funds can be held or released on it. However, the hard structuring signal (two sub-$10,000 debits within 24 hours), combined with program-level breaches in sanctioned_country_transfers, reserve_coverage_ratio, and ach_unauthorized_return_rate, indicates a pattern that extends beyond this single alert. This should be escalated for a person to review the program's broader transaction pattern and the counterparty relationship, including confirmation of the counterparty's country.

{
  "n": 886,
  "band": "hold",
  "skoor": 55,
  "signals": [
    {
      "code": "amount.gt_10x_median",
      "detail": "amount > 10× program median (67432)",
      "weight": 20
    },
    {
      "code": "structuring.pattern",
      "hard": true,
      "detail": "2 debits just under $10,000 in 24h",
      "weight": 35
    }
  ],
  "autoHold": true,
  "confidence": 1,
  "routeReason": "hard signal"
}