Activity on an entity flagged by screening (PEP status no, high risk).

What happened. Alert ade6051d-ce5c-4d84-9cef-81dff5c02007 was opened by the sanctions_or_pep detector on 2026-09-17 for entity enti_sim_harb_skonrvy3x6, part of the Harbor Marketplace Payouts program. The detector routes to review on every hit by design (routeReason: 'detector always reviewed'), and the entity was flagged as high risk by screening. What the evidence shows. The entity record shows PEP status 'no', verification status VERIFIED, and review reasons 'none'. The only signal present is entity.high_risk (weight 20), with no sanctions list match, no adverse media hit, and no other corroborating signal despite n=4. The associated transfer, acht_sim_harb_ay5c05sd3zz, is a single outgoing ACH credit for $445.70 USD, already SETTLED, with no return code. The transfer itself carries an unscored, unconfident risk band (skoor null, n=4, confidence null) and hard_signal is false. The entity was last screened 2026-06-26, about three months before this alert opened, with no new reason cited for re-flagging. There are no prior dispositions on this entity or transfer. What was checked. Reviewed the alert evidence block, the entity screening record, the transfer record, and program declared volume/rails. Checked for a specific sanctions or PEP match, adverse media reason, or return code on the transfer. None found. Checked whether the transfer is still pending or held; it is already settled, so a hold or release recommendation would not apply to it. What is recommended. Close the alert. The evidence consists of a single generic high-risk flag from screening with no PEP status, no sanctions match, no adverse review reason, and a verified entity identity. The linked transfer is a small, already-settled ACH credit ($445.70) with no return code, well within the program's declared $4,000,000 monthly volume. There is no basis in the evidence for holding funds (already settled) or for escalating (no pattern across multiple transfers or entities is shown; n=4 signals but only one signal is populated). If future screening produces a specific sanctions or PEP match, or if the entity's high-risk flag is later paired with adverse detail, the alert should be reopened for review.

{
  "n": 4,
  "band": "unscored",
  "skoor": null,
  "signals": [
    {
      "code": "entity.high_risk",
      "detail": "entity marked high risk by screening",
      "weight": 20
    }
  ],
  "routeReason": "detector always reviewed"
}