Transaction Monitoring

    Investigate every alert with full context, cited evidence, and a clear recommendation. See how Variance does it with our interactive demo below.

    Get a demo

    No more backlogs.
    From alert to action in minutes.

    Resolve alerts with context spanning dozens of different tools.

    Variance
    Alert volumeScales with volume
    Evidence artifacts per case8-15
    Every alert investigatedSame rigor, every time

    Wire transfers

    Sanctions + counterparty analysis

    Card Payments

    Velocity + merchant risk

    ACH / Direct Debit

    Pattern + return rate analysis

    Lending

    Income analysis + stacking

    Different product, different agent

    Deploy agents tailored to each business line, segment, and risk scenario, with their own logic, data sources, and escalation rules.

    Variance

    Suspicious pattern detected — structuring activity flagged for review.

    Alert generated on 02/20/2026, 03:14:07 EST. Requires analyst review.

    Escalate Case
    Alert #TXN-20260220-4891Risk Score: High
    Structuring DetectedVelocity Anomaly

    Account holder Marcus Webb (ACC-88291) executed 7 cash deposits totaling $48,200 across 4 branches within a 72-hour window. Each deposit was deliberately kept below the $10,000 CTR threshold (range: $5,800–$8,400). Pattern matches known structuring typology. Historical baseline for this account: 1.2 transactions/week with an average of $2,100. Velocity and amount deviation exceed 4σ. Recommended for SAR filing.

    Flagged Transactions

    TXN-7821$8,400Downtown
    Feb 18, 9:12 AM
    TXN-7834$7,200Midtown
    Feb 18, 2:45 PM
    TXN-7856$6,900Eastside
    Feb 19, 10:08 AM
    TXN-7871$5,800Downtown
    Feb 19, 3:33 PM
    TXN-7889$7,500Westfield
    Feb 20, 8:51 AM
    TXN-7894$6,100Midtown
    Feb 20, 11:22 AM
    TXN-7901$6,300Eastside
    Feb 20, 2:47 PM

    Behavioral Analysis

    Txn Velocity7 / 72hr
    Baseline1.2 / week
    Avg Amount$6,886
    Deviation4.2σ
    Multi-Branch4 branches in 72 hours
    Sub-ThresholdAll deposits below $10,000 CTR limit

    Agent Findings

    Structuring pattern identified
    Agent detected 7 sub-threshold deposits across multiple branches — consistent with known structuring typology
    Confirmed
    Velocity anomaly flagged
    Agent queried transaction history and found frequency 5.8× above account baseline
    Confirmed
    Amount clustering detected
    Agent analyzed deposit amounts ($5.8k–$8.4k) and identified deliberate sub-$10k clustering
    Confirmed
    Geographic dispersion noted
    Agent mapped 4 distinct branch locations used within a 72-hour window
    Flagged

    Account Summary

    Marcus WebbHigh Risk
    Account
    ACC-88291
    Account Type
    Personal Checking
    Opened
    2023-11-02
    Prior Alerts
    0
    Recommended Action
    SAR Filing

    Variance Case Summary

    Verdict:ESCALATE

    Why:

    • 7 cash deposits totaling $48,200 deliberately kept below the $10,000 CTR threshold.
    • Transaction velocity 5.8× above account baseline with 4.2σ deviation in amount.
    • Multi‑branch deposit pattern across 4 locations consistent with known structuring typology.

    Key facts:

    • Risk score 0.91 / 1.00 (High) — ML structuring probability 98.2%.
    • No prior alerts on file; no sanctions or PEP matches for account holder.
    • SAR filing recommended within 30 days. Evidence package includes 7 transaction records, behavioral analysis, and 3 rule matches.

    Never miss a suspicious transaction

    See how Variance monitors transactions at scale.

    Get a demo

    Built for regulated teams

    Every action is logged, every decision is auditable, and your data stays where you need it.

    SOC 2 Type II certified

    Data encrypted at rest (AES-256) and in transit (TLS 1.3). Regular third-party penetration testing.

    Flexible deployment

    Fully managed SaaS, private VPC peering, or on-premise air-gapped deployment for the most sensitive environments.

    Every action, fully auditable

    Immutable, timestamped records of every agent action, decision, and configuration change. Examiner-ready from day one.

    Learn more about security →