SystemPayments Operations

Payment Investigations

Payment investigations worked as one cited thread, from the request to the signed reply

Wire inquiries answered in hours, not days, with every liability reply checked.

See one case, screen by screen ↓
demo40minutesfrom Halberd's camt.110 to a closed case, signed by two people
demo5draftsin one set for the checker: camt.111, camt.029, correction entries and two notices
target100%of replies that admit liability, move money or pay a claim approved by a second person
demo6of 14Halberd cases in 90 days were name and number mismatches, raised to the relationship manager
In short

What is Payment Investigations?

Payment Investigations is software in which payment operations teams work wire inquiries, cancellations and non-receipt claims as cases, with replies. Each case reads as one thread: the request, the agents' research steps with the record each one read, and the drafted replies. The analyst sends routine replies; a team lead approves any reply that admits liability, moves money or pays a claim.

AI use cases in banking: a buyer's guide to agentic AI for bank and credit union operations →

Updated

The problem

Why payment investigations take days

Payment investigations are the questions that come back after a wire is sent or received: our customer was not credited, please cancel, where is my wire, we claim interest for the late credit. Before anyone can answer, the payment investigation analyst finds the payment in four to six systems — the payments hub, the SWIFT gateway and tracker, the Fedwire gateway, the core banking system, the general ledger and the bank's case tool — copying the UETR from one to the next. Free-text MT 199s and emails still arrive beside structured ISO 20022 messages, and the client or correspondent sets the deadline: “reply by 17:00 Frankfurt time”.

The dangerous replies are the ones that admit a mistake or move money. A reply that says the bank credited the wrong account accepts liability under UCC Article 4A, and the correction debits another customer; today the four-eyes check is often an email with a screenshot. A missed deadline turns into a fee claim, an interest claim or a complaint. The same correspondent sends the same problem again and again, and nobody tells the relationship manager. And SWIFT moves every investigation to camt.110 and camt.111 through Case Management by November 2027.

typical5–10dayson average to resolve a payment investigation, unchanged for years
typical$12.10a paymentaverage fee for each rejected or repaired payment, before the case work behind it
Where a non-receipt case's working hours goestimated
By hand4.8 hours
With the solution0.5 hours
  • Reading the request and opening the case0.5 → 0.1 h
  • Finding the payment in the hub, tracker, core and ledger1.5 → 0.1 h
  • Deciding fault under UCC 4A and the correspondent agreement1 → 0.1 h
  • Writing the replies, correction entries and notices1 → 0.1 h
  • Second-person approval, posting and sending0.8 → 0.1 h

Estimated split of the people's working time on one non-receipt case, by hand and with the solution. It leaves out the waiting in between, which is why a case worked by hand takes days.

How it works

How an investigation moves

Seven agents read, trace, judge and draft every investigation; the analyst sends routine replies and a team lead approves anything that admits liability or moves money.

What comes in
Requests in4 channels · SWIFT, Fedwire, MT 199 and email, client service
Agents at work
Reading agentthe request, any format
Then
Research agenthub, tracker, core, ledger
Then
Rules agentliability, money, claims
Then
Drafting agentcamt.111, camt.029, notices
Correction agentvalue-dated entries
A person decides
Analyst and team leadthe analyst sends routine replies; the team lead approves the rest
What comes out
Replies sent
Corrections posted
Repeat issues raised
One case, step by step

One payment investigation, from camt.110 to closed in 40 minutes

Thursday, October 22, 2026, at Corvane National Bank. On Monday, Halberd Bank AG in Frankfurt sent USD 48,250.00 for Feldmann Präzisionsteile GmbH's invoice INV-7741 to Marlowe Tool & Die LLC. At 8:52 a.m. Halberd's camt.110 arrives: the beneficiary says it was never credited, and the reply is due by 11:00 a.m. ET. Here is what happens next, screen by screen, in the working solution.

  1. 018:52–8:54 a.m.

    The request, and the payment found in four systems

    Reading agent and Research agent

    The Reading agent reads Halberd's camt.110, matches the UETR and notes the reply is due by 17:00 Frankfurt, 11:00 a.m. ET. The Research agent finds the pacs.008 in the payments hub, the SWIFT tracker's credited status (ACCC) at 10:42 a.m. on Oct 19, and the core posting: credited by account number to …4417, Marlow Tool Supply Inc. Marlowe Tool & Die LLC is …4471. Dana Whitfield's inbox, sorted by the client's deadline, puts the case at the top.

    Research agent: “Beneficiary name check scored the names 0.81 against the 0.80 auto-pass threshold, and passed them with no review.”

  2. 029:05–9:06 a.m.

    Correct the posting, do not return the funds

    Rules agent

    Halberd follows up with a camt.056 cancellation: “If the beneficiary cannot be credited, please return the funds.” The Reading agent links it to the case by the same UETR. The Rules agent finds that the name and the number belong to different customers and Corvane's own check measured the difference, citing UCC 4A-207, Regulation J and the correspondent agreement. The Research agent confirms Marlow Tool Supply's balance of $212,904.16 covers the reversal, and §14.3 of its account agreement allows correcting a posting error, with notice.

    Rules agent: “Correct the posting; do not return. The reply admits a Corvane-side miss.”

  3. 039:07 a.m.

    Five drafts at the foot of the thread

    Drafting agent and Correction agent

    A camt.111 to Halberd: corrected with value Oct 19, Marlowe Tool & Die LLC credited USD 48,250.00, no charges. A camt.029 answering the cancellation: rejected, because the payment is applied to the named beneficiary. The correction entries: debit …4417, credit …4471 back-valued to Oct 19, no net effect on the general ledger. Then a notice to Marlow Tool Supply and a credit advice to Marlowe Tool & Die, from templates camt.111 v3.2, camt.029 v2.4 and notice v4.0, at a confidence of 0.94.

    “This set admits liability and moves money, so a second person approves it. You cannot send it yourself.”

  4. 049:16 a.m.

    She asks why not return the funds

    Dana Whitfield · Payment Investigations Analyst

    Dana opened the case at 9:14. Before she decides, she asks the agents: “Why correct instead of returning the funds?” The Rules agent answers in the thread: Halberd asked for a return only if the beneficiary cannot be credited, and it can, because Marlowe Tool & Die LLC holds …4471. A return would send Feldmann's money back and leave invoice INV-7741 unpaid.

    Also suggested under the drafts: “Is any interest owed to Halberd?” and “Has Marlow Tool Supply used the funds?”

  5. 059:22 a.m.

    Sent for checking, not sent

    Dana Whitfield · Payment Investigations Analyst

    Because the set admits liability and moves money, the button reads Send for checking, with Edit and Reject proposal beside it. Dana sends it to Marcus Oyelaran, the team lead on duty, with a note: “Name check passed 0.81 on a different customer. Correct, do not return; both replies and both notices attached. Due 11:00 a.m.” In the checker queue, signed in as Dana, Approve is refused.

    “You made this draft. Separation of duties: a second person approves it.”

  6. 069:31 a.m.

    The team lead approves on the same evidence

    Marcus Oyelaran · Exceptions and Investigations Team Lead

    Marcus sees the same thread, the same citations and the correction entries the maker saw. The amount is inside his $250,000 limit, so he approves with the reason “Evidence complete”. Approving posts correction CR-26-1022-0419, sends the camt.111 and camt.029 through SWIFT Case Management, and sends both notices. Had he returned it, he would have picked a reason code such as RC-03 Liability wording.

  7. 079:32 a.m. · 40 minutes

    Closed 40 minutes after the request

    Correction agent and Drafting agent

    The Correction agent posts the entries: …4417 debited and …4471 credited USD 48,250.00, with value Oct 19. Halberd acknowledges both replies at 9:32 a.m., and the notice and the credit advice go out. No interest is owed, because the credit is back-valued. The outcome reads signed by Dana Whitfield and Marcus Oyelaran.

    “Closed at 9:32 a.m. · 40 minutes after the request”

  8. 08Afterwards

    Halberd's repeat issues reach the relationship manager

    Helena Strand · Correspondent Banking Relationship Manager

    The case is Halberd's sixth name and account number mismatch in 90 days: 14 cases in all, the six worth $412,780. The Trends agent drafts a review note for the Nov 5 relationship review, with the cases behind each number. It also proposes raising the name-check auto-pass threshold to 0.90, for Grace Liu, the administrator, and Renata Kowalczyk, Head of E&I, to approve.

    Trends agent: in the last 90 days, 0.90 “would have stopped 6 of 6 mismatches and added about 41 reviews a day”.

  9. 09On the record

    Every step on the audit trail

    Owen Pratt · Internal Audit

    Every action by people and agents is on the trail with when, who, case, what, why and the evidence, and opening a source is logged too. Export packs are built for OCC examiners, internal audit, the BSA officer and a correspondent's request, with account numbers masked and Financial Crimes referrals only in the BSA pack.

Who it’s for

Built for everyone who works an investigation.

The same Halberd case, seen by the four people around it — what their day looked like, and what it looks like now.

DW
Dana WhitfieldPayment Investigations Analyst · maker
Payment Investigations Analyst
Before
Works 25–35 open cases, and spends half her day finding the payment in four systems before she can even answer.
Now
Opens a case already traced, judged and drafted, with every step cited; sends routine replies and sends the rest for checking.
MO
Marcus OyelaranExceptions and Investigations Team Lead · checker up to $250,000
Exceptions and Investigations Team Lead
Before
Approves replies that admit liability or move money from an email with a screenshot.
Now
Sees the same thread and evidence as the maker, then approves with a reason or returns with a reason code.
HS
Helena StrandCorrespondent Banking Relationship Manager · 40 correspondents
Correspondent Banking Relationship Manager
Before
Learns about repeat problems from the correspondent, in the quarterly review.
Now
Sees repeat issues by correspondent with the cases behind each number, and a review note already drafted.
TR
Tomás ReyesTreasury Management Client Service Officer
Treasury Management Client Service Officer
Before
A commercial client wants an answer on the call, and he can only give a ticket number.
Now
Asks about the client's wire, gives the status in plain words and sends a drafted email; restricted details never reach his view.
Built on the engine

7 agents. Each with one job, and hard limits.

Seven agents read, trace, judge and draft every investigation; the analyst sends routine replies and a team lead approves anything that admits liability or moves money.

Reading agent

Reads each inbound request, structured (camt.110, camt.056, Fedwire camt.056) or free text (MT 199, email), classifies the case and extracts the UETR, amount, parties and the client's deadline, with a confidence on each field.

  • Never guesses a field under 0.85 confidence: it asks the analyst
Research agent

Finds the payment and its story: the payments hub record, the tracker status, the Fedwire leg, the core posting, the beneficiary check log and balances, citing each record.

  • Read-only: never places a hold or posts
Rules agent

Works out what the facts mean under UCC Article 4A, Regulation J, the SWIFT rulebook and the correspondent agreement, marks drafts that admit liability, move money or pay a claim, and computes compensation.

  • Never decides: it proposes, with its reasons and citations
  • Proposals below 0.70 confidence go to the team lead
Drafting agent

Writes the camt.111, camt.029, MT 199, client emails and customer notices from versioned templates, and removes restricted wording from anything a client or correspondent sees.

  • Never sends a reply that admits liability, moves money or pays a claim
  • Never mentions a referral to Financial Crimes
Correction agent

Drafts reversal, credit, return (pacs.004) and claim payment entries, value-dated, with the general ledger effect.

  • Never posts without a checker's approval
Deadline agent

Watches every client deadline, predicts the cases at risk and why, escalates, and proposes how to rebalance work across the 22 analysts.

  • Never reassigns without the team lead
Trends agent

Summarizes repeat issues by correspondent and by cause, drafts relationship review notes, and proposes control changes such as a name-check threshold.

  • Never contacts a correspondent
  • A control change is a proposal for the administrator and the Head of E&I
Team lead

Approves what admits liability or moves money. The agents propose; a named person decides.

Ask in plain words

Ask about any case, payment or deadline

The analyst can question the agents in the thread before she decides, and the assistant answers about any case, payment, deadline or correspondent her role may see, with the message, posting and rule cited.

Why correct instead of returning the funds?

Halberd's camt.056 asks for a return only if the beneficiary cannot be credited. It can: Marlowe Tool & Die LLC holds …4471. A return would send Feldmann's money back and leave invoice INV-7741 unpaid. Correcting puts the funds where Halberd's instruction named, with value Oct 19, as the agreement asks.

Why didn't the name check stop the Halberd payment?

It scored “Marlowe Tool & Die LLC” against “Marlow Tool Supply Inc.” at 0.81, and the auto-pass threshold is 0.80, so it posted with no review. Six Halberd payments in 90 days had the same kind of mismatch. A proposal to raise the threshold to 0.90 is waiting for Grace Liu and Renata Kowalczyk.

Which cases will miss their client deadline today?

Six are at risk. Two are yours: PI-26-33795, where the SWIFT tracker did not answer, and PI-26-33802, waiting for Aldermoor Foods' consent. PI-26-33733 needs Renata Kowalczyk, who is in a meeting until 11:30 a.m.

Is any interest owed to Halberd?

No. The credit to Marlowe is back-valued to Oct 19, so no one loses the use of the funds. If Halberd claimed anyway, 3 days at the 3.95% federal funds rate would be $15.88.

Every screen

The working solution, as it ships.

13 screens from the working solution, on its sample data. Pick one to see it large.

The investigation threadA plain inbox sorted by the client's deadline, and the selected payment investigation as one thread: Halberd's camt.110 at the top, then the agents' research steps, each cited to the payments hub, the tracker, the core posting and the name check.
Correct, do not returnThe camt.056 cancellation linked by UETR, and the Rules agent's finding under UCC 4A-207, Regulation J and the correspondent agreement, with the balance check and the drafted correction.
Drafted repliesThe camt.111 and camt.029, the correction entries and two customer notices, marked Admits liability, Moves money and Customer notice, with Send for checking, Edit and Reject proposal.
Ask the agentsThe analyst asks why correct instead of return, and the Rules agent answers in the thread with its sources, before she decides.
The checker queueDrafts that need a second person, with the maker, amount and deadline; the maker is refused when she tries to approve her own.
The team lead approvesApprove with a reason: the correction posts and both replies and both notices are sent, in one signed step.
Closed in 40 minutesThe thread after approval: the correction posted, both replies acknowledged, both notices sent, and the outcome signed by two people.
A free-text wire inquiryAn emailed wire inquiry read field by field with a confidence on each; the agent asks about the one it is unsure of, then traces the wire and drafts a routine reply.
The client viewA client service officer asks about a client's wire and gets the status in plain words and a drafted email; internal notes and referrals never reach this view.
Fee and interest claimsClaims in and out with the computation: interest at the federal funds rate on a 360-day year, the cause cited, and every claim payment approved by a second person.
Deadlines and escalationsOpen cases by the client's deadline, the six at risk with their reasons, workload by analyst, a proposed rebalance and the escalation rules.
Repeat issues by correspondentHalberd's 14 cases in 90 days, six of them name and account number mismatches, the cases behind the number and a drafted review note.
Audit trail and export packsEvery action by people and agents with who, what, when, why and the evidence, and export packs for examiners, internal audit and the BSA officer.
Governance

Payment investigations that are cited, checked and on the record.

Every step cites its recordEach agent line and value carries a numbered citation that opens its source: the payments hub record, the tracker status, the core posting, the name-check log, the agreement or the rule. Opening a source is logged.
A second person signs what moves moneyA reply that admits liability, moves money, pays a claim or sends a customer notice is approved by a team lead. Corrections above $250,000 and claims above $10,000 go to the Head of E&I.
Separation of duties, enforcedA maker never checks their own draft, a checker who edited a draft cannot approve it, and the administrator cannot act on cases. Access follows need to know, with account numbers masked to the last four digits.
No tipping offFinancial Crimes referrals are restricted: never on a client or correspondent view and never in a reply. The Drafting agent removes restricted wording from every client and correspondent reply.
Versioned agents and templatesModels, instructions and reply templates are versioned, and overrides and returns carry reason codes. A new version runs on last month's cases first and goes live only when its results match the approved replies and a team lead signs it off.
Every action on the audit trailWho, what, when, why and which evidence, for people and agents, with export packs for OCC examiners, internal audit, the BSA officer and a correspondent's request. Funds transfer records and case files are kept five years.
Configuration

Your limits and rules, as settings

The administrator sets them; every change is saved as a new version with who made it and why.

SettingDefaultChoose from
Beneficiary name check · auto-pass threshold0.80A versioned rule; a change needs the administrator and the Head of E&I (0.90 proposed after the Halberd case)
What counts as “admits liability”Needs a checkerLocked on: any reply saying the bank misapplied, delayed or wrongly charged a payment
What counts as “moves money”Needs a checkerLocked on: any posting, reversal, return (pacs.004) or claim payment
Team lead approval limit$250,000$100,000 · $250,000 · $500,000
Claim payment limit$10,000$5,000 · $10,000 · $25,000
Default client deadlineOne business daySame day · One business day · Two business days
EscalationTeam lead 2 hours before; Head of E&I at the deadline1 hour · 2 hours · 4 hours before
Interest compensationFederal funds rate, 360-day yearUCC 4A-506, from the reference-rate feed
Connections

Works with the systems an investigation already runs on

Payments hubinbound and outbound messages, the repair queue and the beneficiary name check
SWIFT gateway and trackercamt.110 and camt.111, camt.056 and camt.029, MT 199, tracker statuses and Case Management
Fedwire gatewayFedwire ISO 20022 messages and requests for return
Core banking systempostings, balances and customer records
General ledgersuspense and control accounts
Case management and document imagingthe bank's case records, synced both ways; agreements, fee schedules and client instructions
What it changes

The difference, in numbers.

Every figure is labelled: a target the solution is built to, an estimate, a typical published result, or a proven one.

target
40min
to close a non-receipt case, against a typical three days
Today2.9 days
With agents40 min
target
100%
of replies that admit liability, move money or pay a claim approved by a second person
Every liability reply
maker and checker on the record
typical
Nov 2027
SWIFT deadline: every investigation as camt.110/camt.111 through Case Management

“demo” = seen in the working solution, on its sample data · “target” = the design goal, measured in the live solution · “estimated” = our estimate · “typical” = published figures (SWIFT, “It's time to transform exceptions and investigations”, April 2025 — 5–10 days on average to resolve a payment investigation; an industry study of failed payments (2023) — $12.10 average fee per rejected or repaired payment; SWIFT's ISO 20022 exceptions and investigations timeline — camt.110 and camt.111 through Case Management by November 2027). Banks, companies, people, account numbers and references named on this page are fictional — characters and sample data in the working solution.

Questions

What payment operations teams ask us.

What is Payment Investigations?

Payment Investigations is software in which payment operations teams work wire inquiries, cancellations and non-receipt claims as cases, with replies. Each case reads as one thread: the request, the agents' research steps with the record each one read, and the drafted replies. The analyst sends routine replies; a team lead approves any reply that admits liability, moves money or pays a claim.

How does the payment investigation process work?

The Reading agent reads the request and extracts the UETR, amount, parties and deadline. The Research agent finds the payment in the payments hub, the tracker, the core banking system and the general ledger. The Rules agent works out what the facts mean under UCC Article 4A, Regulation J and the correspondent agreement, and the Drafting and Correction agents write the replies, notices and entries for a person to send or send for checking.

Does it handle camt.110 and camt.111, camt.056 and camt.029?

Yes. A camt.110 investigation request is answered with a camt.111, and a camt.056 cancellation request with a camt.029; when a correspondent sends both, both replies are drafted in the same thread. Replies travel through SWIFT Case Management. Fedwire requests for return are worked the same way under Regulation J.

Can it work wire inquiries that arrive as MT 199 or email?

Yes. Paste a free-text request and the Reading agent shows each field it extracted with a confidence. Below 0.85 it asks rather than guesses: in the sample, an email date written “21/10” is read as October 21 at 0.78, and the analyst confirms it before the research runs.

How does it decide whether the bank is at fault?

It does not decide; it proposes. The Rules agent reads UCC 4A-207 and 4A-506, Regulation J, the SWIFT rulebook and the correspondent agreement, explains its finding with citations, and marks each draft that admits liability, moves money or pays a claim. The analyst can ask it why, edit a draft with an override reason, or reject the proposal with a reason code.

Do people stay in control of what is sent and posted?

Yes. Agents never post, never send a reply that admits liability, and never contact a correspondent or client outside an approved reply. The analyst sends routine replies; anything that admits liability, moves money, pays a claim or sends a customer notice is approved by a team lead, the maker can never approve their own draft, and larger amounts go to the Head of E&I.

Can a client see that a case was referred to Financial Crimes?

No. Financial Crimes referrals are restricted and never shown on a client or correspondent view or in a reply. A client service officer sees status only, and the Drafting agent removes restricted wording from every client and correspondent reply. Referrals appear only in the BSA officer's export pack.

How long does it take to go live?

The Agentic Solution Engine builds and deploys it from your requirements and documents — your correspondent agreements, reply templates, approval limits and a sample of past investigations — and it goes live once every quality gate has passed. We will walk you through it on your own cases first.

See it on
your wire inquiries.

We'll run Payment Investigations on a sample of your own past wire inquiries and cancellations.