Entity velocity spiked: 2 transfers and $3,567.98 in 24 hours.

What happened. A velocity_spike alert fired on entity enti_sim_nort_b6q1x3vh2j (Elm Partners 016) after the system observed 2 transfers totaling $3,567.98 within a 24-hour window, exceeding twice the program's daily average. What the evidence shows. The alert carries a single signal, velocity.sum_24h_gt_2x_daily_avg, weighted 10, with no hard signal flag and an unscored band (skoor null). The one transfer detail provided, acht_sim_nort_aahfh0h15a, is an ACH debit of $1,052.45, already SETTLED, with no return code. The entity is a VERIFIED business, not flagged high risk, not PEP, with no review reasons on file and a recent screening date of 2026-07-08. The program (Northwind Payroll) declares monthly volume of $2,500,000.00; the flagged 24-hour sum of $3,567.98 is a small fraction of that declared volume. There are no prior dispositions on this entity. What was checked. Reviewed the alert evidence block, the single referenced transfer's status and return code, the program's declared volume and rails, and the entity's verification, risk, and screening status. Confirmed no hard signal was set and no additional signals beyond the single velocity trigger. Noted the counterparty's country is unknown but no other signal ties to that gap. What is recommended. No transfer is held by this alert (the referenced transfer is already SETTLED), so release is not applicable. Given the unscored/low-weight signal, verified entity with no risk flags, and transfer volume well within the program's declared scale, this does not require manual review. Recommend closing the alert. If future alerts on this entity show a hard signal, a scored band, or a return code, escalate at that point.

{
  "n": 2,
  "band": "unscored",
  "skoor": null,
  "signals": [
    {
      "code": "velocity.sum_24h_gt_2x_daily_avg",
      "detail": "24h sum above 2× the program daily average",
      "weight": 10
    }
  ],
  "routeReason": "detector not auto-closable"
}