Recommended General Rules
Unit21 recommends creating the following rules:
1. Dormant Activity Embedded Filters
Identifies accounts that have been dormant for greater than 100 days that show sudden activity in their account of more than $5000.
![Screen Shot 2022-06-23 at 2.01.25 PM.png 1600](https://files.readme.io/35e5115-Screen_Shot_2022-06-23_at_2.01.25_PM.png)
![Screen Shot 2022-06-23 at 2.00.32 PM.png 1600](https://files.readme.io/b30ef58-Screen_Shot_2022-06-23_at_2.00.32_PM.png)
2. Historical Deviations A Embedded Filters
Generate alerts for Accounts that have last 3 months transaction volumes >65% different from last year
Window = 1 month
![Screen Shot 2022-06-23 at 2.07.59 PM.png 1600](https://files.readme.io/d2b6ca4-Screen_Shot_2022-06-23_at_2.07.59_PM.png)
3. Historical Deviations B Embedded Filters
Historical deviation greater than 100% in the last 3 days compared to the last 31 days.
![Screen Shot 2022-06-23 at 2.18.01 PM.png 1600](https://files.readme.io/f435f42-Screen_Shot_2022-06-23_at_2.18.01_PM.png)
![Screen Shot 2022-06-23 at 2.18.47 PM.png 1600](https://files.readme.io/f92e32c-Screen_Shot_2022-06-23_at_2.18.47_PM.png)
![Screen Shot 2022-06-23 at 2.18.59 PM.png 1600](https://files.readme.io/937afa7-Screen_Shot_2022-06-23_at_2.18.59_PM.png)
4. Layering Embedded Filters
Velocity of funds - Different Beneficiary - Individual - US/RoW - Find someone with at least 10K in deposits then has 90% of that sum withdrawn.
Window = 3 days
![Screen Shot 2022-06-23 at 2.35.56 PM.png 1600](https://files.readme.io/939a8a2-Screen_Shot_2022-06-23_at_2.35.56_PM.png)
![Screen Shot 2022-06-23 at 2.27.23 PM.png 1600](https://files.readme.io/2271e83-Screen_Shot_2022-06-23_at_2.27.23_PM.png)
![Screen Shot 2022-06-23 at 2.31.44 PM.png 1600](https://files.readme.io/1266120-Screen_Shot_2022-06-23_at_2.31.44_PM.png)
![Screen Shot 2022-06-23 at 2.33.16 PM.png 1600](https://files.readme.io/e8f0ab3-Screen_Shot_2022-06-23_at_2.33.16_PM.png)
5. Newly Seen
Entities with 1 newly seen sender instruments in the past 3 months.
![Screen Shot 2022-06-23 at 2.39.05 PM.png 1600](https://files.readme.io/c9b994f-Screen_Shot_2022-06-23_at_2.39.05_PM.png)
6. Simple Count Embedded Filters
Flag receivers named Smith who receive > 10 txns over 1000 dollars in 31 days.
Window = 1 week
![Screen Shot 2022-06-23 at 3.00.08 PM.png 1600](https://files.readme.io/54eece1-Screen_Shot_2022-06-23_at_3.00.08_PM.png)
![Screen Shot 2022-06-23 at 2.59.28 PM.png 1600](https://files.readme.io/6fd0ff6-Screen_Shot_2022-06-23_at_2.59.28_PM.png)
![Screen Shot 2022-06-23 at 2.59.58 PM.png 1600](https://files.readme.io/82316f4-Screen_Shot_2022-06-23_at_2.59.58_PM.png)
7. Simple Filters
ACH Pulls unto Debit where Liability Model score is empty, at cancel bucket, or high for same day hold:
txn_event.amount >= 600 &&
txn_event.custom_data->Fraud Score >= 0.0069 &&
txn_event.custom_data->Fraud Score <= 0.0178 &&
txn_event.receiver_instrument_external_id Like \"debit%\" &&
txn_event.custom_data->Fraud Score Type == \"unauthModelScore_v4\" &&
txn_event.sender_instrument_external_id Like \"externalBank%\"
![Screen Shot 2022-06-23 at 3.21.56 PM.png 1600](https://files.readme.io/9ee2e5b-Screen_Shot_2022-06-23_at_3.21.56_PM.png)
8. Simple Object Count Transactions Embedded Filters
Flags the first payroll a company has run.
Window = 10 min
![Screen Shot 2022-06-23 at 3.29.41 PM.png 1600](https://files.readme.io/c54a615-Screen_Shot_2022-06-23_at_3.29.41_PM.png)
9. Simple Statistics With Count Embedded Filters
Check Deposit Velocity (Weekly)
Window = 1 week
![Screen Shot 2022-06-23 at 5.07.41 PM.png 1600](https://files.readme.io/88bfab4-Screen_Shot_2022-06-23_at_5.07.41_PM.png)
![Screen Shot 2022-06-23 at 5.07.29 PM.png 1600](https://files.readme.io/ffb10b4-Screen_Shot_2022-06-23_at_5.07.29_PM.png)
10. Structuring Embedded Filters
Triggers Alerts on Structuring Transaction within a one day period.
Window = 2 hours
![Screen Shot 2022-06-23 at 5.10.32 PM.png 1600](https://files.readme.io/3ad4ac9-Screen_Shot_2022-06-23_at_5.10.32_PM.png)
11. Transaction Statistics A Embedded Filters
Creates an alert if a certain number of transactions that lie within a range that's close to regulation thresholds.
Window = 5 days
![Screen Shot 2022-06-23 at 5.13.58 PM.png 1600](https://files.readme.io/b663e4c-Screen_Shot_2022-06-23_at_5.13.58_PM.png)
Updated 8 months ago