Transaction Risk Skoor 40 (review band) on a $721.95 ach transfer: returns.counterparty_prior_unauthorized.

What happened. An ACH outgoing transfer of $721.95 from Lantern Lending's payout agent to counterparty cpty_sim_lant_asr3v7ggcjp was flagged by the skoor_review detector at a risk score of 40 (review band) due to one prior unauthorized return associated with this counterparty. What the evidence shows. The transfer itself settled with no return code, indicating it completed without incident. The triggering signal is a single prior unauthorized return for the counterparty (weight 40, the entire score). The subject entity, Payout Agent (Lantern), is VERIFIED, not high risk, not PEP, and was screened recently (2026-06-27). Program-level KRIs show ach_unauthorized_return_rate at 0 and ach_overall_return_rate at 1.22%, both within normal range, and counterparty_concentration_top1 is low (13.6%), suggesting no broader pattern of unauthorized-return activity tied to this program. Manual_review_aging_hours shows a breach (1433.6 hours, n=3), but this reflects program-wide review queue aging, not this specific alert. What was checked. Transfer status and return code, entity verification and risk flags, program KRIs for unauthorized/overall return rates and concentration, and prior dispositions (none found for this alert). What is recommended. The transfer has already settled with no return, so there is no fund movement to hold or release. The single prior unauthorized return is the only adverse signal and does not, on its own, indicate an active pattern given clean program-level return rates and a verified, low-risk entity. Close the alert with a note to monitor this counterparty for any additional returns, which would warrant escalation if repeated.

{
  "n": 485,
  "band": "review",
  "skoor": 40,
  "signals": [
    {
      "code": "returns.counterparty_prior_unauthorized",
      "detail": "1 prior unauthorized return(s)",
      "weight": 40
    }
  ],
  "confidence": 0.94,
  "routeReason": "detector not auto-closable"
}