- Before
- Carries about 14 open cases, each on its own clock, and spends the first days of each one pulling statements, wires and tickets from six systems into a spreadsheet before she can see a pattern.
- Now
- Opens a case the agents built overnight, with the money already laid out as lanes, the linked customers proposed with their reasons, and a draft whose every number has been checked. She asks, accepts, and decides.
One AML case investigation, from escalated alert to an approved SAR decision
Case C-2026-04417 at Corvane National Bank: Lindqvist Imports LLC, an importer of Scandinavian home furniture, made 23 cash deposits between $8,600 and $9,700 at six branches in 19 days, then wired $203,500 to a trading company in Hong Kong. The alert fired on September 29, Level 1 analyst Dana Okafor escalated it, and Renata Solís confirmed detection on October 5. This is day 17 of 30.
- 01Morning
Her cases, ranked by the SAR clock
Renata Solís · AML Investigator, Level 2Renata has 14 open cases, each with a 30-day bar marking day 20 and day 25, the agents' one-line finding and its state. One sentence on top says what needs her. Lindqvist Imports LLC is ready to decide, with a draft of File a SAR at 93%.
4 cases are ready for your decision. The oldest open case is on day 24 of 30.
- 02Before she opened it
A case file of 41 items, built and cited
Case builderThe case builder read the alert and the escalation note, 12 months of statements, the customer profile, seven counterparties, prior alerts and the restricted SAR index, and 14 documents. Every item carries its system and how often it is cited. Document imaging timed out on 2 of the 23 deposit tickets, so the file names the gap and offers a retry.
Document imaging timed out at 06:14 on 2 of 23 deposit tickets (Sep 21 and Sep 25). The draft does not rely on them; the ledger has both deposits.
- 03The case opens
The money, laid out as a timeline
Timeline analystDays run left to right and each counterparty is one thin lane. Each payment is a dot sized by its amount: squares for cash, triangles for wires, circles for ACH. The cash lane shows 23 deposits, $211,100, from September 8 to 26. The Jadeport Trading Co. Ltd lane shows four wires to Hong Kong, $203,500, while wires to the regular suppliers in Sweden and Denmark fell. "Day 17 of 30 · due Wed, Nov 4" sits in the header.
- 04Proposed, not added
Three linked customers, each with the reason
Link finderThe link finder searched shared addresses, devices, branch-and-hour deposits and beneficiaries. Dorian Pask shares Lindqvist's registered address and deposited cash seven times at the same branch within the hour (strength 0.94). Teodora Vance used the same online banking device and sent $40,000 to Lindqvist (0.91). Brightfield Home Goods wired $48,000 to the same Jadeport account (0.88). It also shows the two customers it considered and did not link, and why.
A link joins the case only when the investigator accepts it. A rejection needs a reason code, L-01 to L-04.
- 05One click
Every statement opens its source
Renata Solís · AML Investigator, Level 2Renata opens the citation behind the links: the branch transaction log. It lists 16 deposits by the three customers, $147,200, each within 60 minutes of a Lindqvist deposit at the same branch. She accepts the links, and they join the timeline as lanes. Her opening of the source is logged.
- 06She asks
A cited answer, with the payments it used lit up
Timeline analystRenata asks what happened between September 14 and 18. The answer sits beside the timeline: seven cash deposits, $64,300, at all six branches in five days, then $54,200 to Jadeport Trading on September 18, and five deposits by the linked customers within an hour of Lindqvist's. The payments it used are lit on the timeline.
A teller at Riverside Plaza noted on Sep 14 that the depositor asked whether two deposits on one day are added together.
- 07Drafted, then checked
The draft says file, and the verifier finds one wrong count
Recommendation drafter · VerifierThe recommendation drafter wrote File a SAR at 93%, under reason codes F-01 (structuring: signs of intent to evade reporting), F-02 (funds transfers inconsistent with the customer's business) and F-03 (third-party or nominee depositors), with five subjects and a statement. The verifier, on a second model, checked 38 amounts, counts, dates and names against the source with $0 tolerance. 37 agree.
Verifier: 37 of 38 values agree. One sentence says “five branches”; the ledger shows six.
- 08Day 17 of 30
She decides, with reason codes and an attestation
Renata Solís · AML Investigator, Level 2Renata accepts the verifier's correction, chooses File a SAR over No SAR or Need more, keeps reason codes F-01, F-02 and F-03, and ticks the attestation. Had she chosen against the draft, she would have needed an override code and a note. The decision goes to Priya Raman.
Corrected from the ledger: six branches · 38 of 38 values agree.
- 09Approved
A second investigator approves
Priya Raman · Senior AML InvestigatorPriya sees the decision, the statement and three checks: every value agrees with its source, the maker and checker are different people, and the case is within its clock. She approves. Had Renata tried to approve her own decision, the button would have told her why she cannot.
- 10Handed off
SAR filing, rating changes and an account exit
Thomas Reyes · BSA OfficerThe SAR filing team receives a packet: five subjects, activity from September 8 to October 1, 2026, 39 cash deposits totaling $358,300 and five wires to Jadeport totaling $251,500, 41 cited items, file by Wednesday, November 4. Three customer risk ratings rise to High, waiting for a senior investigator. Thomas approves the account exit, with a closure notice the confidentiality guard checked for any mention of an investigation.