Read the alert, not just the score
Every alert leads with its reason in a full sentence, then the score, the customer and the time left. Your queue is ordered by what matters and how long remains.
Funds reached an exchange whose inflows are 31% darknet-traced, four times the customer’s declared ceilingALT-2291 · corporate customer
4.6h leftWork through the evidence
Evidence is sorted into adverse, inconclusive, context and clearing. A quick closure is locked until you have read what could change your mind.
TipThe lock is deliberate. It is what lets a closure stand up in QA months later.
Close as false positive · read 3 remaining items first
Open a case and test the story
When one alert is not enough, open a case. The agent drafts a narrative, marked as machine-written, and you test hypotheses as open, supported, weakened or refuted.
The mandate expansion explains the higher outflowSigned letter on file
supportedPart of the outflow goes outside the mandateCounterparties not yet reconciled
openEscalate through the chain
Suspicion goes from the analyst to the compliance officer, who adds a view, and then to the MLRO, who decides whether to file. Each step is signed with a name, a time and a reason.
- 1Report to the MLROAnalyst
- 2Compliance officer’s viewCompliance officer
- 3Filing decisionMLRO
Draft and check the report
The report drafts itself from the case, and each field shows where it came from. Checks run before submission, and anything blocking is shown first.
- Subject and beneficial owners listed
- Transactions with hash, asset and value
- Every attribution names its provider
File, and keep the record
The MLRO signs and exports to goAML. The report joins the filing register, any follow-up from the FIU is tracked with its deadline, and contact with the customer is restricted to prevent tipping off.
More guides.
Set up a rule
Write a monitoring rule in plain language, test it on your history and put it live with a second approver.
Supervise the whole programme
Keep queues, quality, approvals and deadlines in view from one dashboard.
Prepare for an inspection
Give an examiner read-only access and export the record, without rebuilding anything.
See it on your own cases.
We will walk through this with your team, on a scenario you choose.