Alert · reviewed · open

The entity's first transfer, $481.55, above the program median, came 0.0 hours after verification.

Detector: rapid_onboarding
Severity: medium
Program: Harbor Marketplace Payouts (simulated)
Subject: transfer acht_sim_harb_5ma3ezpt3yv
Transfer: acht_sim_harb_5ma3ezpt3yv · $481.55 · ach outgoing
Skoor at alert: null unscored
Hard signal: no
Policy: policy-v1
Opened: 2026-09-17 19:30Z
Closed: —
Decision clock: none · due — no clock
Escalated: —

Draft narrative

What happened. A rapid_onboarding detector fired on entity Larch Studio 111 (enti_sim_harb_cogz0d6k3vk) for its first transfer, an outgoing ACH debit of $481.55, which settled 0.0 hours after the entity's verification completed. What the evidence shows. The transfer amount ($481.55) is above the program median ($429.66) but not by a large margin. The transfer status is SETTLED with no return code, indicating the ACH debit completed without incident. The transfer and entity risk scores are both null/unscored, with the evidence noting n=4, a small sample size insufficient for scoring. Hard signal is false. The entity is VERIFIED, not high risk, not PEP, has no review reasons on file, and was screened on 2026-06-21. There are no prior dispositions on this entity or alert. What was checked. Program details (Harbor Marketplace Payouts, declared $4,000,000/month volume, ACH/realtime rails, US), the transfer record, the entity's verification and screening status, the counterparty record (country unknown, no other flags), and prior disposition history. What is recommended. Close the alert. The transfer has already settled, so no hold or release action applies. The entity carries no adverse flags (not high risk, not PEP, no review reasons), the amount is only modestly above the program median, and there is no hard signal. The unscored band reflects a small sample size (n=4) rather than any indication of risk, so evidence is thin but not adverse. No pattern across multiple entities or alerts is present in this record to warrant escalation.

Recommendation

Confidence

0.55

Model

claude-sonnet-5

Drafted

2026-09-17 19:30Z

Rationale

Transfer status is SETTLED; no funds are available to hold or release.
Entity is VERIFIED with no high-risk, PEP, or review-reason flags, and was screened within the last month.
Hard signal is false and no return code issues are present on the transfer.
Score is unscored due to small sample size (n=4), not due to any adverse finding; this is noted as a limitation lowering confidence rather than a risk indicator.
No prior dispositions or related alerts are present to suggest a broader pattern requiring escalation.
Transfer amount is only about 12% above the program median, not an extreme outlier.

Evidence

{
  "n": 4,
  "band": "unscored",
  "skoor": null,
  "typology": "rapid_onboarding",
  "confidence": null,
  "thresholds": {
    "hours": 24
  },
  "medianCents": "42966",
  "routeReason": "detector not auto-closable",
  "hoursSinceVerification": 0
}

Decision

Dispositions

No disposition yet.

Actions

Freeze, request to program, and suspend need a second, distinct approver. Clear hold, cancel, and pause execute on the requester's approval. Executed through the bank's own API with the tenant's sandbox key; a dry run when there is none.

No actions requested.