Alert · reviewed · open
The entity's first transfer, $1,273.27, above the program median, came 0.0 hours after verification.
- Detector
- rapid_onboarding
- Severity
- medium
- Program
- Meridian Remit (simulated)
- Subject
- transfer acht_sim_meri_afxrry0i9r7
- Transfer
- acht_sim_meri_afxrry0i9r7 · $1,273.27 · ach outgoing
- Skoor at alert
- null unscored
- Hard signal
- no
- Policy
- policy-v1
- Opened
- 2026-09-17 19:30Z
- Closed
- —
- Decision clock
- none · due — no clock
- Escalated
- —
Draft narrative
What happened. The rapid_onboarding detector fired on the entity's first transfer, an ACH debit of $1,273.27, initiated 0.0 hours after verification, which is above the 24-hour threshold used by the detector and above the program median of $568.88.
What the evidence shows. The transfer acht_sim_meri_afxrry0i9r7 settled with no return code. The entity Alder Co 20 is VERIFIED, not high risk, not PEP, has no review reasons on file, and was screened on 2026-06-21. The only contributing signal is counterparty.first_time (+10). The transfer skoor is null with n=0 and confidence null, meaning there is not yet enough transaction history to score this entity, not that risk was detected. The counterparty's country is unknown, which is a data gap rather than a positive risk indicator. There are no prior dispositions on this entity.
What was checked. Reviewed the alert evidence block, the transfer record and its settlement status, the program's declared volume and rails, the entity's verification and screening status, and prior dispositions. No hard signal was present, and the route reason recorded is 'detector not auto-closable' rather than any elevated risk finding.
What is recommended. The transfer has already settled, so there is no held transfer to release or hold. Given verified identity, no high-risk or PEP flags, no adverse screening, no return code, and a single low-weight signal (first-time counterparty), no further action is needed on this alert. If the entity generates additional rapid or high-value transfers shortly after onboarding, those should be reviewed together as a pattern.
- Recommendation
- close
- Confidence
- 0.62
- Model
- claude-sonnet-5
- Drafted
- 2026-09-17 19:30Z
- Rationale
- Transfer status is SETTLED with no return code, precluding a hold or release recommendation.
- Entity is VERIFIED, not high risk, not PEP, with no review reasons and recent screening.
- Only one low-weight signal (counterparty.first_time +10) contributes to this alert; hard_signal is false.
- Skoor is unscored (n=0, confidence null) due to lack of transaction history, not due to detected risk, which limits certainty and lowers confidence.
- No prior dispositions exist to indicate a recurring pattern for this entity.
Evidence
{
"n": 0,
"band": "unscored",
"skoor": null,
"typology": "rapid_onboarding",
"confidence": null,
"thresholds": {
"hours": 24
},
"medianCents": "56888",
"routeReason": "detector not auto-closable",
"hoursSinceVerification": 0
}
Skoor signals
| Signal | Weight | Hard | Detail |
|---|---|---|---|
| counterparty.first_time | +10 | first transfer with this counterparty | |
| counterparty.first_time_and_large | +15 | amount above the program p95 (78714) |
Decision
Sign in as an operator to decide. Operator sign-in →
Dispositions
No disposition yet.
Actions
Freeze, request to program, and suspend need a second, distinct approver. Clear hold, cancel, and pause execute on the requester's approval. Executed through the bank's own API with the tenant's sandbox key; a dry run when there is none.
No actions requested.