SKOOR Risk Money movement. Skoored by AI.

Alert · reviewed · open

A single $9,100.00 ACH debit sits just under the $10,000 reporting threshold with no 24-hour pattern around it.

Detector
amount_just_below_threshold
Severity
low
Program
Northwind Payroll (simulated)
Subject
transfer acht_sb_33c93fbe7c831401
Transfer
acht_sb_33c93fbe7c831401 · $9,100.00 · ach outgoing
Skoor at alert
35 review
Hard signal
no
Policy
policy-v1
Opened
2026-09-17 23:13Z
Closed
Decision clock
complex · due 2026-09-20 23:13Z due 2026-09-20 23:13Z
Escalated

Draft narrative

What happened. A ach outgoing debit transfer of $9100.00 (acht_sb_33c93fbe7c831401) on program Northwind Payroll (simulated) was flagged by detector amount_just_below_threshold: A single $9,100.00 ACH debit sits just under the $10,000 reporting threshold with no 24-hour pattern around it.. What the evidence shows. Transaction Risk Skoor 35 (band review). Signals: counterparty.first_time (+10), counterparty.first_time_and_large (+15), amount.gt_3x_median (+10). Entity Sandbox Structurer: verification VERIFIED, PEP no, high risk no. What was checked. Program KRIs as of the latest snapshot: frozen_accounts ok, hold_aging_hours watch, overdraft_events ok, manual_review_rate ok, card_fraud_declines unmeasured, pep_flagged_entities watch, velocity_vs_declared ok, stale_screening_share ok, high_risk_entity_share watch, reserve_coverage_ratio ok, ach_overall_return_rate ok, verification_denial_rate ok, manual_review_aging_hours breach, ach_unauthorized_return_rate ok, sanctioned_country_transfers ok, ach_administrative_return_rate ok, counterparty_concentration_top1 ok. No prior dispositions on this entity or counterparty. What is recommended. Recommended: escalate. A person decides; this draft was assembled from the evidence without a model (model call failed).
Recommendation
escalate
Confidence
null (template, no model)
Model
none (template)
Drafted
2026-09-17 23:14Z
Rationale
  • Template draft: recommendation follows the band and the hard-signal rule only.

Evidence

{
  "n": 1476,
  "band": "review",
  "skoor": 35,
  "typology": "amount_just_below_threshold",
  "confidence": 0.7,
  "thresholds": {
    "maxCents": "999999",
    "minCents": "900000"
  },
  "amountCents": "910000",
  "routeReason": "detector not auto-closable"
}

Skoor signals

SignalWeightHardDetail
counterparty.first_time+10first transfer with this counterparty
counterparty.first_time_and_large+15amount above the program p95 (380696)
amount.gt_3x_median+10amount > 3× program median (189860)

Decision

Sign in as an operator to decide. Operator sign-in →

Dispositions

No disposition yet.

Actions

Freeze, request to program, and suspend need a second, distinct approver. Clear hold, cancel, and pause execute on the requester's approval. Executed through the bank's own API with the tenant's sandbox key; a dry run when there is none.

No actions requested.