AML Investigator · Architecture
How it works
Alerts processed
342
todaySTRs filed
12
this weekCTRs filed
84
this weekFalse positive rate
34%
down from 48%Avg triage time
18 min
LLM-assistedAgent pipeline6 modules · 5 LLM decision points
📥TMS Alert IngestionPulls alerts from Actimize/SAS AML via batch + real-time feeds. Normalizes alert payloads.
🔎Alert EnrichmentSummarizes transaction patterns, identifies anomalies vs. customer profileLLM
🛡️Sanctions ScreeningFuzzy name matching with context-aware disambiguationLLM
🧠LLM Pattern AnalysisClassifies typology, maps fund-flow chains, scores suspicion levelLLM
📊Triage & AssignmentProduces triage score (0–100) with explainable rationaleLLM
📝STR/CTR DraftingDrafts STR narrative with evidence citations, regulatory cross-refsLLM
Typology distribution342 alerts
Alert status distribution342 total
New
48
Enriched
62
Investigating
47
STR Drafted
18
Filed
12
Closed
155
Alert queue
10 alerts
| Customer | Typology | Risk | Amount | Status | Assigned To | Last Action |
|---|---|---|---|---|---|---|
Naveen Textiles Pvt Ltd CUS-88210 · CA-4420187 | Structuring | ₹13.8L | Investigating | Anita Rao | LLM enrichment complete — 14 structured deposits identified 2h ago | |
Rajan Exports CUS-77340 · CA-4420201 | Trade-Based ML | ₹48.2L | STR Drafted | Vikram Desai | STR narrative drafted — pending reviewer sign-off 45m ago | |
Meera Agarwal CUS-66501 · SA-3310456 | Cash Intensive | ₹9.2L | Enriched | Priya Menon | CBS and CKYC data pulled — income mismatch flagged 4h ago | |
Al-Rashid Trading FZE CUS-55620 · CA-4420344 | Sanctions Hit | ₹75.0L | Investigating | Anita Rao | OFAC SDN fuzzy match confirmed — account frozen pending review 30m ago | |
Dinesh Kumar Sharma CUS-44780 · SA-3310678 | Dormant Activation | ₹3.4L | Enriched | Suresh Nair | Account dormant 18 months, KYC refresh triggered 6h ago | |
Sunrise Agro Commodities CUS-33910 · CA-4420512 | Layering | ₹31.5L | Investigating | Vikram Desai | Fund flow mapped — 5 intermediary accounts identified 1d ago | |
Pooja Handicrafts CUS-22100 · CA-4420680 | Trade-Based ML | ₹16.8L | New | Unassigned | TMS alert ingested — awaiting enrichment 8h ago | |
Fatima Begum CUS-11250 · SA-3310890 | Structuring | ₹9.8L | Closed | Priya Menon | Closed as false positive — salary credits from 2 employers confirmed 2d ago | |
Bharat Heavy Industries CUS-99440 · CA-4420920 | Layering | ₹56.0L | Filed | Anita Rao | STR filed with FIU-IND via FINnet 2.0 1d ago | |
Green Valley Farms LLP CUS-88570 · CA-4421001 | Cash Intensive | ₹11.2L | New | Unassigned | TMS alert ingested — cash deposit pattern detected 3h ago |
LLM decision points6 decision points
Alert EnrichmentSummarizes 6–24 months of transaction data into a concise investigator brief
InputRaw TMS alert + CBS transaction history + CKYC profile
OutputEnriched dossier with anomaly summary and customer risk context
Gate≥ 0.75 for auto-proceed; below routes to manual review
Txn Pattern AnalysisDetects structuring, layering, trade-based ML patterns across the transaction graph
InputEnriched dossier + transaction graph + peer group benchmarks
OutputTypology classification + fund-flow diagram + suspicion indicators
Gate≥ 0.80 for typology assignment; multi-typology flagged for senior review
Alert Triage & ScoringProduces a composite risk score combining rule-based and LLM-derived signals
InputEnriched dossier + typology + prior case history + sanctions results
OutputTriage score (0–100) + priority tier + recommended assignee
Gate≥ 0.85 for auto-assignment; below queued for supervisor triage
Investigation BriefGenerates a step-by-step investigation plan for the assigned analyst
InputTriage output + full transaction details + KYC documents
OutputStructured investigation brief with evidence list and recommended actions
GateAlways human-reviewed — brief is advisory only
STR Narrative DraftingDrafts the suspicious transaction report narrative with regulatory citations
InputInvestigation findings + evidence refs + typology analysis
OutputDraft STR in FIU-IND prescribed format with Part A/B/C populated
GateNever auto-filed — mandatory MLRO sign-off before submission
False Positive LearningFeeds closure rationales back to TMS rule engine and LLM fine-tuning pipeline
InputClosed-as-FP alerts + investigator rationale + updated customer data
OutputRule refinement suggestions + model feedback signals
Gate≥ 0.90 for auto-rule-update proposals; all reviewed quarterly
Compliance guardrailsAll enforced · PMLA + RBI + FIU-IND
✓
PMLA 2002 — Suspicious Transaction ReportingAll STRs filed within 7 days of detection; system enforces deadline tracking
✓
RBI KYC Master Direction 2016CDD/EDD checks mandatory before alert closure; KYC refresh triggered for stale profiles
✓
FIU-IND Filing — 15-day STR windowAuto-escalation if STR not filed within 15 days of alert generation
✓
Sanctions — 24-hour freezeConfirmed sanctions hits trigger immediate account freeze; MLRO notified within 1 hour
✓
Human-in-the-Loop for STRLLM drafts STR narrative; MLRO must review and digitally sign before FINnet submission
✓
Audit trail — full traceabilityEvery LLM decision, human override, and evidence reference logged to immutable audit store
✓
Data residency — India onlyAll PII and transaction data processed within AWS ap-south-1; no cross-border model calls
✓
PII masking in agent tracesCustomer names, account numbers, and Aadhaar masked in all trace logs and SIEM exports
Connectors required8 integrations
TMS (Actimize / SAS AML)Alert feed from transaction monitoring system — batch and real-time
REST API + SFTPInbound
CBS (Finacle / T24)Core banking — account details, transaction history, customer master
REST API / JDBCBidirectional
Sanctions DatabasesOFAC SDN, UN Consolidated, EU sanctions, Indian MHA lists — daily refresh
REST API + FeedInbound
CKYC RegistryCentral KYC — identity verification, PAN/Aadhaar match, beneficial ownership
REST APIBidirectional
FIU-IND FINnet 2.0STR/CTR filing via FINnet portal — encrypted submission with acknowledgement
SFTP + XML/JSONOutbound
Case Management (Actimize RCM)Investigation workflow — case lifecycle, evidence attachments, audit trail
REST APIBidirectional
Data WarehouseHistorical alert data, investigation outcomes, model training datasets
JDBC / RESTWrite + Query
LLM APIClaude API — pattern analysis, triage scoring, STR narrative generation
HTTPSRequest/Response
End-to-end agent workflowFull orchestration pipeline
Full alert-to-filing lifecycle: TMS alert enrichment, sanctions screening (UN/OFAC/MHA/PEP), LLM-powered triage and pattern analysis, investigation brief generation, and STR/CTR filing to FIU-IND via FINnet 2.0.
Workflow execution sequence
Node types & classificationsStartLLM Decision PointDecision GateEscalationOutcomeHuman-in-the-LoopProvision / Protocol