KYT Alert Queue

The Alert Queue is where your compliance team works the alerts raised by Transaction Trust Monitoring (TTM). Each alert is a case: it is assigned to an officer at a review tier, investigated, escalated if needed, and then closed or sent for regulatory filing.

info

The Alert Queue is on the Reports > KYT Reports page, under the Alerts and Approved Transactions tabs. It is available when Transaction Monitoring (KYT) and the Rule Builder are enabled for your account.

Review Tiers

Alerts are worked in four review tiers, from lowest to highest: L1, L2, L3 and MLRO (Money Laundering Reporting Officer). An officer's tier comes from their role. See Permissions.

Alerts Tab

The Alerts tab lists the alerts you can work. The tab shows a count of the alerts in the current view.

What you see depends on your tier:

• MLRO officers and the main account see all of the institution's alerts.
• Other officers see the alerts assigned to them.
• L3 and MLRO officers see an extra Tier column.

Columns

Column	Description
Alert ID	The alert's identifier.
Customer	The customer's name and ID.
Discipline	The type of alert, for example AML or Fraud.
Tier	The tier the alert currently sits at (L3 and MLRO officers only).
Amount	The transaction amount.
Triggered	How long ago the alert was raised, with the date and time.
Status	The alert's current status. See Alert Statuses.
Assigned to	The officer holding the alert. When several officers are assigned, hover over the count to see the others.
Deadline	The time left to work the alert, or how long it is overdue.

You can sort by Amount, Triggered and Deadline. Use the pagination control to show 10, 25, 50 or 100 alerts per page.

Searching and Filtering

• Search: search by Alert ID, customer name or customer ID. Type at least three characters.
• All Status: show only alerts with the selected statuses.
• Tier and Discipline: narrow the list by tier or alert type. L3 and MLRO officers find these under More Filters, with Apply and Reset. They also get an All Assignees filter.
• Date range: choose the period on the right.

Click an alert to open it in a new browser tab.

Approved Transactions Tab

The Approved Transactions tab lists transactions that were approved automatically and needed no human review. It shows the Alert ID, Customer, Discipline, Amount, Triggered and Status columns, and can be searched and filtered by discipline.

Alert Statuses

Status	Meaning
Open	The alert is waiting to be worked.
Pending Info	Information has been requested and the alert is waiting for it.
Escalated	The alert was moved to a higher tier. Shown as "Escalated to" followed by the tier.
Pending Approval	The alert is pending approval.
Closed	The alert was closed.
Closed as False Positive	The alert was closed as a false positive.

Alert Detail

The alert detail page brings together everything needed to decide the case.

• Header: the transaction decision, the case assignees, discipline and tier, the Alert ID, and the customer's ID, date of birth, nationality, email, phone and access information.
• Risk Score, Suggested Tier and SLA.
• Customer Details: a summary of the customer's figures.
• AI Compiled Summary: a summary of the alert, a False Positive Assessment with a False Positive Likelihood percentage, and Recommended Steps. When a part has not been generated, the card says so.
• Transaction: the transaction's details.
• Triggered Rules and Transaction Signals: the rules that matched and the risk indicators detected.
• Linked Transactions: other transactions linked to this one.

Changing the Transaction Decision

When the transaction's decision is Manual Review, click the decision in the header to open Decision Control. Choose Approve or Decline, enter a reason (up to 200 characters) and confirm. Once a decision is approved or declined, it cannot be changed again here.

Toolbar

Icon	What it does
Hide PII / Show PII	Masks or shows the customer's personal data on the page. Shown only when PII data hiding is enabled for your account.
Refresh	Reloads the alert.
Download Report	Downloads the alert report as a PDF.
Comments	Opens the alert's comments.
Activity Logs	Opens the alert's audit trail.

Case Actions

The Case Actions panel on the right holds the actions you can take. Every action that asks for a reason needs at least 10 characters.

Group	Action	What it does
Quick	Reassign Alert	Moves the alert to one or more named officers at a selected tier. Available to L3 and MLRO officers.
Investigate	Request Customer Info	Sends the customer a verification link to collect more information. See below.
Investigate	Escalate Tier	Moves the alert to a higher tier and assigns it to an officer there. Not shown once the alert is at the MLRO tier.
Close	Close As False Positive	Closes the alert because the activity was reviewed and is not a genuine risk. A reason is required.
Close	Close as Resolved (SAR)	Closes the alert as investigated and explained.
Compile Report	File SAR/SRT	Creates a regulatory report from the alert. Not shown while the alert is at the L1 tier.

Escalating

Escalation moves an alert only upwards: L1 can escalate to L2, L3 or MLRO; L2 to L3 or MLRO; L3 to MLRO. In Escalate Tier, choose the tier in Escalate To, choose the officer in Assign To, enter a reason and click Escalate. Only officers who hold the selected tier are listed.

Requesting Information from the Customer

1. Click Request Customer Info.
2. Choose a verification journey and, optionally, write a Message To Customer.
3. Click Generate Link.
4. Send the link by email with Send Link, or copy it and send it yourself. The link is active for 60 minutes.

The alert then shows an Information Requested panel with the journey, the verification status and the request date.

Sending an Alert for Filing

Click File SAR/SRT, optionally add a reason, and click Submit. A regulatory report is created from the alert and opened in Regulatory Reporting, where it can be completed. The alert is marked Prepare Filing and stays open until it is closed. See Regulatory Reporting.

Comments

Open Comments from the toolbar to discuss the alert with your team.

• Type a comment and click Send.
• Attach a file with Attach a file. Only CSV, PDF, PNG and JPEG files up to 5 MB can be attached.
• Edit or delete your own comments from the comment menu. Edited comments are marked Edited, and deleted comments are shown as "This comment was deleted."

Activity Logs

Open Activity Logs from the toolbar to see the alert's audit trail, newest first. Each entry shows what happened (for example a tier escalation or a customer information request), who did it, when, the assignee, and any reason or message.

Alert Report PDF

Click Download Report to save the alert as a PDF. The report includes the case assignees and tier, risk score and suggested tier, customer details, the AI Compiled Summary, the transaction, triggered rules, transaction signals, linked transactions and the audit trail.

Permissions

Alert Queue permissions are assigned to roles under Settings > Roles & Permissions. They are listed only when Transaction Monitoring (KYT) and the Rule Builder are enabled for your account.

Permission	Grants
kyt_alert_queue	Listed with the Alert Queue permissions. Which tier an officer works at is set by the tier permissions below.
kyt_alert_l1	Places the officer in the L1 tier.
kyt_alert_l2	Places the officer in the L2 tier.
kyt_alert_l3	Places the officer in the L3 tier.
kyt_alert_mlro	Places the officer in the MLRO tier.

A role can hold only one tier. If more than one tier permission is selected, only the highest is kept. Only officers who hold a tier permission can be chosen when an alert is escalated or reassigned to that tier.