{
  "model": "grayson-1",
  "state": {
    "customer": {
      "customer_id": "C-2290415",
      "name": "Ryan P. Castellano",
      "age": 28,
      "customer_since": "2023-02-06",
      "home": "Mesa, AZ; rents an apartment, at this address since 2023",
      "occupation_on_file": "Warehouse operations lead",
      "income_on_file": "Employed by Sonoran Link Distribution",
      "stated_annual_income_usd": 56000,
      "expected_activity": {
        "monthly_deposits_usd": 4300,
        "deposit_sources": "Payroll",
        "p2p": "Occasional, friends and family",
        "wires": "None expected",
        "virtual_currency": "Yes: 'personal investing' (answered at account opening)",
        "cash": "Small ATM withdrawals"
      },
      "identity_verification": "Online at opening 2023-02-06: Arizona driver's license authenticated, selfie match, bureau name, date of birth and SSN match",
      "last_kyc_refresh": "2025-02-10",
      "risk_rating": "Low (raised to Medium 2026-09-24 when this alert opened)",
      "prior_aml_alerts": [],
      "prior_sars_filed": 0,
      "contact_details": "Mobile phone and email on file since opening; no changes in the last 24 months",
      "products": [
        "Personal checking x8153",
        "Savings x8160",
        "Debit card x2076"
      ]
    },
    "accounts": [
      {
        "account": "Personal checking x8153",
        "opened": "2023-02-06",
        "owners": "Ryan P. Castellano",
        "status": "Open, no restrictions",
        "overdraft": "Not enrolled: card purchases decline and ACH debits return when funds are short",
        "limits": {
          "p2p_per_day_usd": 2500,
          "external_transfer_per_day_usd": 10000,
          "atm_per_day_usd": 500,
          "online_wires": "Not enabled"
        },
        "limit_changes": [
          "2026-07-12: instant payments to linked accounts turned on in the app",
          "2026-08-03: external transfer daily limit raised from $2,500 to $10,000 at the customer's request, after a one-time code to the phone on file"
        ],
        "balance_now_usd": 9565.56,
        "average_daily_balance_2025_10_to_2026_08_usd": 4162.24
      },
      {
        "account": "Savings x8160",
        "opened": "2023-02-06",
        "balance_now_usd": 1040.12,
        "activity_since_2025_10": "Monthly interest only"
      }
    ],
    "monthly_summary": {
      "columns": [
        "month",
        "credits_usd",
        "pay_benefits_and_settlements_usd",
        "from_others_usd",
        "from_others_count",
        "distinct_senders",
        "debits_usd",
        "cards_and_bills_usd",
        "p2p_out_usd",
        "transfers_and_wires_out_usd",
        "cash_out_usd",
        "ending_balance_usd"
      ],
      "rows": [
        [
          "2025-10",
          5860.3,
          5860.3,
          0,
          0,
          0,
          3936.3,
          3766.3,
          20,
          150,
          0,
          4134.4
        ],
        [
          "2025-11",
          4388.55,
          4323.55,
          65,
          2,
          2,
          4203.9,
          4053.9,
          0,
          150,
          0,
          4319.05
        ],
        [
          "2025-12",
          4568.36,
          3928.36,
          0,
          0,
          0,
          4189.96,
          3959.96,
          0,
          150,
          80,
          4697.45
        ],
        [
          "2026-01",
          4174.58,
          4174.58,
          0,
          0,
          0,
          4170.69,
          3960.69,
          60,
          150,
          0,
          4701.34
        ],
        [
          "2026-02",
          4165.38,
          4165.38,
          0,
          0,
          0,
          4773.72,
          4498.72,
          25,
          150,
          100,
          4093
        ],
        [
          "2026-03",
          4133.45,
          4133.45,
          0,
          0,
          0,
          3621.1,
          3326.1,
          45,
          150,
          100,
          4605.35
        ],
        [
          "2026-04",
          6078.55,
          6053.55,
          25,
          1,
          1,
          4584.42,
          4374.42,
          0,
          150,
          60,
          6099.48
        ],
        [
          "2026-05",
          3928.36,
          3928.36,
          0,
          0,
          0,
          4175.24,
          3905.24,
          20,
          150,
          100,
          5852.6
        ],
        [
          "2026-06",
          4013.97,
          4013.97,
          0,
          0,
          0,
          4098.13,
          3838.13,
          70,
          150,
          40,
          5768.44
        ],
        [
          "2026-07",
          8625.55,
          3915.55,
          4710,
          11,
          10,
          8207.21,
          3487.21,
          40,
          4580,
          100,
          6186.78
        ],
        [
          "2026-08",
          22561.48,
          4171.48,
          17750,
          20,
          14,
          21081.67,
          3881.67,
          0,
          17160,
          40,
          7666.59
        ],
        [
          "2026-09",
          26892.45,
          3902.45,
          21840,
          25,
          18,
          24863.48,
          3863.48,
          40,
          20960,
          0,
          9695.56
        ],
        [
          "2026-10 (to 10-07)",
          4896.18,
          1964.18,
          2932,
          6,
          5,
          5026.18,
          2106.18,
          0,
          2920,
          0,
          9565.56
        ]
      ]
    },
    "devices_and_logins": {
      "devices": [
        {
          "device": "iPhone 15, our iOS app",
          "first_seen": "2023-10-02",
          "logins_last_90_days": 402,
          "other_customers_seen_on_device": 0
        },
        {
          "device": "Windows PC, Chrome",
          "first_seen": "2024-01-15",
          "logins_last_90_days": 37,
          "other_customers_seen_on_device": 0
        }
      ],
      "login_locations_last_90_days": "Home broadband in Mesa, AZ, the customer's mobile carrier and his employer's guest Wi-Fi; 9 sessions on the Windows PC came through a commercial VPN service (exit nodes in Los Angeles and Dallas)",
      "remote_access_software_detected": false,
      "session_events": [
        {
          "ts": "2026-07-13T03:12:00Z",
          "event": "Instant payments to linked accounts turned on"
        },
        {
          "ts": "2026-08-03T15:40:00Z",
          "event": "External transfer daily limit raised from $2,500 to $10,000; step-up passed with a one-time code to the phone on file"
        }
      ]
    },
    "links_to_other_customers": {
      "shared_devices": 0,
      "shared_phone_numbers": 0,
      "shared_emails": 0,
      "shared_addresses": 0,
      "shared_login_ip_addresses_last_90_days": 0,
      "shared_counterparties": []
    },
    "counterparties": {
      "note": "Everyone the account received money from or sent money to by P2P, ACH, wire, check or external transfer since 2026-08-01; first_activity is the first item with this counterparty in our records",
      "columns": [
        "id",
        "name",
        "kind",
        "institution",
        "first_activity",
        "credits",
        "credits_usd",
        "payments",
        "payments_usd",
        "notes"
      ],
      "rows": [
        [
          "C01",
          "Curtis Gutierrez",
          "Individual",
          "Credit union, OH",
          "2026-08-02",
          1,
          250,
          0,
          0,
          "Payments match marketplace sell orders in the customer's export"
        ],
        [
          "C02",
          "Crypto exchange account x3391",
          "Own account at another institution",
          "Large US crypto exchange",
          "2024-03-02",
          2,
          1790,
          50,
          41040,
          "Linked 2024-03-02 by instant verification; owner name matches the customer; no other customer of ours has linked it"
        ],
        [
          "C03",
          "Lindsey Herrera",
          "Individual",
          "Online bank",
          "2026-07-17",
          4,
          2800,
          0,
          0,
          "Payments match marketplace sell orders in the customer's export"
        ],
        [
          "C04",
          "Carlos Daniels",
          "Individual",
          "Regional bank, NV",
          "2026-08-03",
          3,
          2000,
          0,
          0,
          "Payments match marketplace sell orders in the customer's export"
        ],
        [
          "C05",
          "Brittany Ford",
          "Individual",
          "Regional bank, FL",
          "2026-08-04",
          4,
          6300,
          0,
          0,
          "No marketplace order; customer says direct trade(s) with chat-group buyer @desert_otc; the USDT for this payer's trade on 2026-09-03 went to a wallet the exchange links to an investment-scam cluster"
        ],
        [
          "C06",
          "Madison Morris",
          "Individual",
          "Large national bank",
          "2026-08-06",
          2,
          1700,
          0,
          0,
          "Payments match marketplace sell orders in the customer's export"
        ],
        [
          "C07",
          "Patrick Bradley",
          "Individual",
          "Large national bank",
          "2026-08-06",
          2,
          850,
          0,
          0,
          "Payments match marketplace sell orders in the customer's export"
        ],
        [
          "C08",
          "Whitney Morales",
          "Individual",
          "Large national bank",
          "2026-07-14",
          4,
          1950,
          0,
          0,
          "Payments match marketplace sell orders in the customer's export"
        ],
        [
          "C09",
          "Jennifer Smith",
          "Individual",
          "Large national bank",
          "2026-07-31",
          5,
          3250,
          0,
          0,
          "Payments match marketplace sell orders in the customer's export"
        ],
        [
          "C10",
          "Kevin Sandoval",
          "Individual",
          "Credit union, GA",
          "2026-08-15",
          3,
          5100,
          0,
          0,
          "No marketplace order; customer says direct trade(s) with chat-group buyer @desert_otc; the USDT for this payer's trade on 2026-09-11 went to a wallet the exchange links to an investment-scam cluster"
        ],
        [
          "C11",
          "Imani Mills",
          "Individual",
          "Credit union, CO",
          "2026-08-16",
          1,
          400,
          0,
          0,
          "Payments match marketplace sell orders in the customer's export"
        ],
        [
          "C12",
          "Caitlin Sullivan",
          "Individual",
          "Online bank",
          "2026-08-16",
          1,
          1000,
          0,
          0,
          "Payments match marketplace sell orders in the customer's export"
        ],
        [
          "C13",
          "Travis Simmons",
          "Individual",
          "Large national bank",
          "2026-08-28",
          1,
          1200,
          0,
          0,
          "No marketplace order; customer says direct trade(s) with chat-group buyer @kmoney_p2p"
        ],
        [
          "C14",
          "Natalie Hill",
          "Individual",
          "Large national bank",
          "2026-08-29",
          2,
          1400,
          0,
          0,
          "Payments match marketplace sell orders in the customer's export"
        ],
        [
          "C15",
          "David Martin",
          "Individual",
          "Large national bank",
          "2026-08-30",
          5,
          6900,
          0,
          0,
          "No marketplace order; customer says direct trade(s) with chat-group buyer @bluefin88"
        ],
        [
          "C16",
          "Sean Jackson",
          "Individual",
          "Large national bank",
          "2026-09-03",
          1,
          600,
          0,
          0,
          "Payments match marketplace sell orders in the customer's export"
        ],
        [
          "C17",
          "Heather Robinson",
          "Individual",
          "Credit union, IL",
          "2026-09-11",
          1,
          800,
          0,
          0,
          "No marketplace order; customer says direct trade(s) with chat-group buyer @nightowl_x"
        ],
        [
          "C18",
          "Tyler Nguyen",
          "Individual",
          "Large national bank",
          "2023-06-17",
          1,
          32,
          1,
          40,
          null
        ],
        [
          "C19",
          "Diego Castellano",
          "Individual",
          "Credit union, AZ",
          "2023-04-09",
          1,
          40,
          0,
          0,
          "Customer's brother (same surname; per 2024 call notes)"
        ],
        [
          "C20",
          "Marjorie Prescott",
          "Individual",
          "Regional bank, OH",
          "2026-09-18",
          1,
          1450,
          0,
          0,
          "Scam claim from sending institution 2026-09-24"
        ],
        [
          "C21",
          "Jessica Ellis",
          "Individual",
          "Regional bank, MI",
          "2026-09-20",
          1,
          400,
          0,
          0,
          "Payments match marketplace sell orders in the customer's export"
        ],
        [
          "C22",
          "Madison Hunt",
          "Individual",
          "Credit union, NC",
          "2026-09-20",
          1,
          150,
          0,
          0,
          "Payments match marketplace sell orders in the customer's export"
        ],
        [
          "C23",
          "Aaron Perez",
          "Individual",
          "Regional bank, FL",
          "2026-09-26",
          1,
          1500,
          0,
          0,
          "No marketplace order; customer says direct trade(s) with chat-group buyer @bluefin88; scam claim from sending institution 2026-10-05"
        ],
        [
          "C24",
          "Karen Wells",
          "Individual",
          "Large national bank",
          "2026-07-14",
          1,
          400,
          0,
          0,
          "Payments match marketplace sell orders in the customer's export"
        ],
        [
          "C25",
          "Charles Ford",
          "Individual",
          "Large national bank",
          "2026-09-29",
          1,
          300,
          0,
          0,
          "Payments match marketplace sell orders in the customer's export"
        ],
        [
          "C26",
          "Sara Simmons",
          "Individual",
          "Large national bank",
          "2026-09-30",
          1,
          100,
          0,
          0,
          "Payments match marketplace sell orders in the customer's export"
        ],
        [
          "C27",
          "Evan Dorsey",
          "Individual",
          "Credit union, TX",
          "2026-10-01",
          1,
          900,
          0,
          0,
          "Scam claim from sending institution 2026-10-03"
        ],
        [
          "C28",
          "Daniel Scott",
          "Individual",
          "Regional bank, WA",
          "2026-07-15",
          1,
          750,
          0,
          0,
          "Payments match marketplace sell orders in the customer's export"
        ]
      ]
    },
    "transactions": {
      "note": "Every posted item from 2026-08-01 to the alert; amounts signed (debits negative); balance is the ledger balance after the item; counterparty refers to the counterparties table",
      "columns": [
        "ts",
        "type",
        "amount_usd",
        "balance_usd",
        "description",
        "counterparty",
        "detail"
      ],
      "rows": [
        [
          "2026-08-02T17:17:48Z",
          "p2p_in",
          250,
          6436.78,
          "P2P FROM CURTIS GUTIERREZ",
          "C01",
          "no memo"
        ],
        [
          "2026-08-02T18:11:02Z",
          "transfer_out",
          -240,
          6196.78,
          "RTP TO CRYPTO EXCHANGE x3391",
          "C02",
          null
        ],
        [
          "2026-08-02T19:18:57Z",
          "card_purchase",
          -50.71,
          6146.07,
          "TACO BELL #031544 MESA AZ",
          null,
          "mcc 5814, contactless"
        ],
        [
          "2026-08-02T19:49:51Z",
          "card_purchase",
          -70.13,
          6075.94,
          "WAL-MART #1491 MESA AZ",
          null,
          "mcc 5310, chip"
        ],
        [
          "2026-08-02T21:58:46Z",
          "card_purchase",
          -44.39,
          6031.55,
          "DOORDASH*ORDER SAN FRANCISCO CA",
          null,
          "mcc 5814, card not present"
        ],
        [
          "2026-08-03T01:31:58Z",
          "p2p_in",
          500,
          6531.55,
          "P2P FROM LINDSEY HERRERA",
          "C03",
          "no memo"
        ],
        [
          "2026-08-03T01:34:06Z",
          "transfer_out",
          -150,
          6381.55,
          "TRANSFER TO EXT ACCT x3391",
          "C02",
          "standard ACH to linked account in customer's name; recurring"
        ],
        [
          "2026-08-03T01:56:54Z",
          "transfer_out",
          -470,
          5911.55,
          "RTP TO CRYPTO EXCHANGE x3391",
          "C02",
          null
        ],
        [
          "2026-08-03T14:00:00Z",
          "ach_debit",
          -1560,
          4351.55,
          "MESA VISTA APTS RENT",
          null,
          "SEC WEB"
        ],
        [
          "2026-08-03T22:18:15Z",
          "p2p_in",
          1200,
          5551.55,
          "P2P FROM LINDSEY HERRERA",
          "C03",
          "memo \"usdt\""
        ],
        [
          "2026-08-03T22:57:39Z",
          "transfer_out",
          -1150,
          4401.55,
          "RTP TO CRYPTO EXCHANGE x3391",
          "C02",
          null
        ],
        [
          "2026-08-03T23:18:56Z",
          "card_purchase",
          -57.69,
          4343.86,
          "CIRCLE K #2711 MESA AZ",
          null,
          "mcc 5542, chip"
        ],
        [
          "2026-08-04T01:32:49Z",
          "p2p_in",
          800,
          5143.86,
          "P2P FROM LINDSEY HERRERA",
          "C03",
          "no memo"
        ],
        [
          "2026-08-04T02:28:48Z",
          "transfer_out",
          -760,
          4383.86,
          "RTP TO CRYPTO EXCHANGE x3391",
          "C02",
          null
        ],
        [
          "2026-08-04T03:55:27Z",
          "p2p_in",
          1000,
          5383.86,
          "P2P FROM CARLOS DANIELS",
          "C04",
          "memo \"ord 45170805\""
        ],
        [
          "2026-08-04T04:22:59Z",
          "transfer_out",
          -960,
          4423.86,
          "RTP TO CRYPTO EXCHANGE x3391",
          "C02",
          null
        ],
        [
          "2026-08-04T17:33:59Z",
          "p2p_in",
          1500,
          5923.86,
          "P2P FROM BRITTANY FORD",
          "C05",
          "memo \"usdt\""
        ],
        [
          "2026-08-04T18:41:18Z",
          "transfer_out",
          -1450,
          4473.86,
          "RTP TO CRYPTO EXCHANGE x3391",
          "C02",
          null
        ],
        [
          "2026-08-04T23:53:41Z",
          "p2p_in",
          1000,
          5473.86,
          "P2P FROM BRITTANY FORD",
          "C05",
          "memo \"usdt\""
        ],
        [
          "2026-08-05T01:01:18Z",
          "transfer_out",
          -960,
          4513.86,
          "RTP TO CRYPTO EXCHANGE x3391",
          "C02",
          null
        ],
        [
          "2026-08-06T13:00:00Z",
          "ach_credit",
          1964.18,
          6478.04,
          "SONORAN LINK DIST PAYROLL",
          null,
          "SEC PPD"
        ],
        [
          "2026-08-06T14:00:00Z",
          "ach_debit",
          -254.84,
          6223.2,
          "SRP ELECTRIC AUTOPAY",
          null,
          "SEC PPD"
        ],
        [
          "2026-08-06T15:41:09Z",
          "card_purchase",
          -72.87,
          6150.33,
          "AMAZON MKTPL*AF56TNUQ7 Amzn.com/bill WA",
          null,
          "mcc 5942, card not present"
        ],
        [
          "2026-08-06T20:50:49Z",
          "p2p_in",
          500,
          6650.33,
          "P2P FROM MADISON MORRIS",
          "C06",
          "memo \"usdt\""
        ],
        [
          "2026-08-06T21:56:12Z",
          "p2p_in",
          600,
          7250.33,
          "P2P FROM PATRICK BRADLEY",
          "C07",
          "memo \"ord 68966893\""
        ],
        [
          "2026-08-06T22:18:56Z",
          "transfer_out",
          -1050,
          6200.33,
          "RTP TO CRYPTO EXCHANGE x3391",
          "C02",
          null
        ],
        [
          "2026-08-07T01:57:43Z",
          "p2p_in",
          400,
          6600.33,
          "P2P FROM WHITNEY MORALES",
          "C08",
          "memo \"trade\""
        ],
        [
          "2026-08-07T02:55:20Z",
          "transfer_out",
          -380,
          6220.33,
          "RTP TO CRYPTO EXCHANGE x3391",
          "C02",
          null
        ],
        [
          "2026-08-07T03:08:08Z",
          "card_purchase",
          -27.22,
          6193.11,
          "DUTCH BROS #AZ0412 MESA AZ",
          null,
          "mcc 5814, contactless"
        ],
        [
          "2026-08-08T02:10:33Z",
          "atm_withdrawal",
          -40,
          6153.11,
          "ATM WITHDRAWAL #0412 MESA AZ",
          null,
          "our ATM"
        ],
        [
          "2026-08-08T04:40:20Z",
          "card_purchase",
          -72.14,
          6080.97,
          "WAL-MART #1491 MESA AZ",
          null,
          "mcc 5310, chip"
        ],
        [
          "2026-08-08T22:28:06Z",
          "p2p_in",
          100,
          6180.97,
          "P2P FROM JENNIFER SMITH",
          "C09",
          "no memo"
        ],
        [
          "2026-08-08T23:38:14Z",
          "transfer_out",
          -90,
          6090.97,
          "RTP TO CRYPTO EXCHANGE x3391",
          "C02",
          null
        ],
        [
          "2026-08-09T17:27:49Z",
          "card_purchase",
          -13,
          6077.97,
          "IN-N-OUT MESA #213 MESA AZ",
          null,
          "mcc 5814, contactless"
        ],
        [
          "2026-08-11T10:14:32Z",
          "card_purchase",
          -11.99,
          6065.98,
          "SPOTIFY USA",
          null,
          "mcc 5815, card on file, recurring"
        ],
        [
          "2026-08-12T17:17:42Z",
          "card_purchase",
          -15.41,
          6050.57,
          "IN-N-OUT MESA #213 MESA AZ",
          null,
          "mcc 5814, contactless"
        ],
        [
          "2026-08-13T02:20:51Z",
          "card_purchase",
          -95.36,
          5955.21,
          "FRY'S FOOD #0066 MESA AZ",
          null,
          "mcc 5411, contactless"
        ],
        [
          "2026-08-14T03:02:44Z",
          "card_purchase",
          -49.67,
          5905.54,
          "CHIPOTLE 1186 MESA AZ",
          null,
          "mcc 5814, contactless"
        ],
        [
          "2026-08-14T14:00:00Z",
          "ach_debit",
          -412.37,
          5493.17,
          "ALLY AUTO PMT",
          null,
          "SEC PPD"
        ],
        [
          "2026-08-15T02:46:18Z",
          "p2p_in",
          500,
          5993.17,
          "P2P FROM JENNIFER SMITH",
          "C09",
          "no memo"
        ],
        [
          "2026-08-15T03:51:23Z",
          "transfer_out",
          -480,
          5513.17,
          "RTP TO CRYPTO EXCHANGE x3391",
          "C02",
          null
        ],
        [
          "2026-08-15T16:24:23Z",
          "p2p_in",
          1800,
          7313.17,
          "P2P FROM KEVIN SANDOVAL",
          "C10",
          "no memo"
        ],
        [
          "2026-08-15T17:13:04Z",
          "transfer_out",
          -1720,
          5593.17,
          "RTP TO CRYPTO EXCHANGE x3391",
          "C02",
          null
        ],
        [
          "2026-08-16T01:34:36Z",
          "card_purchase",
          -34.59,
          5558.58,
          "FILIBERTO'S #33 MESA AZ",
          null,
          "mcc 5814, chip"
        ],
        [
          "2026-08-16T02:02:57Z",
          "card_purchase",
          -214.5,
          5344.08,
          "TICKETMASTER *DIAMONDBACKS",
          null,
          "mcc 7922, card not present"
        ],
        [
          "2026-08-16T02:12:43Z",
          "card_purchase",
          -58.13,
          5285.95,
          "AUTOZONE #3360 MESA AZ",
          null,
          "mcc 5533, chip"
        ],
        [
          "2026-08-16T15:20:03Z",
          "p2p_in",
          400,
          5685.95,
          "P2P FROM IMANI MILLS",
          "C11",
          "memo \"ord 95885181\""
        ],
        [
          "2026-08-16T15:43:11Z",
          "transfer_out",
          -380,
          5305.95,
          "RTP TO CRYPTO EXCHANGE x3391",
          "C02",
          null
        ],
        [
          "2026-08-16T19:37:49Z",
          "p2p_in",
          1000,
          6305.95,
          "P2P FROM CAITLIN SULLIVAN",
          "C12",
          "memo \"usdt\""
        ],
        [
          "2026-08-16T20:42:29Z",
          "transfer_out",
          -960,
          5345.95,
          "RTP TO CRYPTO EXCHANGE x3391",
          "C02",
          null
        ],
        [
          "2026-08-16T21:14:16Z",
          "card_purchase",
          -24.08,
          5321.87,
          "FILIBERTO'S #33 MESA AZ",
          null,
          "mcc 5814, chip"
        ],
        [
          "2026-08-17T10:09:33Z",
          "card_purchase",
          -24.99,
          5296.88,
          "PLANET FITNESS CLUB FEES",
          null,
          "mcc 7997, card on file, recurring"
        ],
        [
          "2026-08-19T00:14:15Z",
          "card_purchase",
          -19.67,
          5277.21,
          "WAL-MART #1491 MESA AZ",
          null,
          "mcc 5310, chip"
        ],
        [
          "2026-08-19T03:13:36Z",
          "card_purchase",
          -43.39,
          5233.82,
          "CIRCLE K #2711 MESA AZ",
          null,
          "mcc 5542, chip"
        ],
        [
          "2026-08-19T05:09:28Z",
          "card_purchase",
          -26.39,
          5207.43,
          "DUTCH BROS #AZ0412 MESA AZ",
          null,
          "mcc 5814, contactless"
        ],
        [
          "2026-08-19T10:00:40Z",
          "card_purchase",
          -80,
          5127.43,
          "COX COMM PHX",
          null,
          "mcc 4899, card on file, recurring"
        ],
        [
          "2026-08-20T05:09:41Z",
          "card_purchase",
          -20.23,
          5107.2,
          "FILIBERTO'S #33 MESA AZ",
          null,
          "mcc 5814, chip"
        ],
        [
          "2026-08-20T13:00:00Z",
          "ach_credit",
          2207.3,
          7314.5,
          "SONORAN LINK DIST PAYROLL",
          null,
          "SEC PPD"
        ],
        [
          "2026-08-20T21:11:29Z",
          "card_purchase",
          -22.02,
          7292.48,
          "FILIBERTO'S #33 MESA AZ",
          null,
          "mcc 5814, chip"
        ],
        [
          "2026-08-21T10:20:10Z",
          "card_purchase",
          -19.99,
          7272.49,
          "MICROSOFT*XBOX",
          null,
          "mcc 5816, card on file, recurring"
        ],
        [
          "2026-08-21T17:09:54Z",
          "card_purchase",
          -22.21,
          7250.28,
          "DOORDASH*ORDER SAN FRANCISCO CA",
          null,
          "mcc 5814, card not present"
        ],
        [
          "2026-08-22T04:19:33Z",
          "p2p_in",
          1500,
          8750.28,
          "P2P FROM KEVIN SANDOVAL",
          "C10",
          "no memo"
        ],
        [
          "2026-08-22T04:34:21Z",
          "transfer_out",
          -1440,
          7310.28,
          "RTP TO CRYPTO EXCHANGE x3391",
          "C02",
          null
        ],
        [
          "2026-08-22T19:10:37Z",
          "card_purchase",
          -37.28,
          7273,
          "FRY'S FOOD #0066 MESA AZ",
          null,
          "mcc 5411, contactless"
        ],
        [
          "2026-08-24T10:05:24Z",
          "card_purchase",
          -65,
          7208,
          "T-MOBILE AUTOPAY",
          null,
          "mcc 4814, card on file, recurring"
        ],
        [
          "2026-08-24T23:05:12Z",
          "card_purchase",
          -96.39,
          7111.61,
          "WAL-MART #1491 MESA AZ",
          null,
          "mcc 5310, chip"
        ],
        [
          "2026-08-25T01:21:02Z",
          "card_purchase",
          -43.58,
          7068.03,
          "CHIPOTLE 1186 MESA AZ",
          null,
          "mcc 5814, contactless"
        ],
        [
          "2026-08-27T17:32:07Z",
          "card_purchase",
          -9.41,
          7058.62,
          "TALL SAGUARO TAPHOUSE MESA AZ",
          null,
          "mcc 5813, chip"
        ],
        [
          "2026-08-28T16:07:39Z",
          "p2p_in",
          1800,
          8858.62,
          "P2P FROM BRITTANY FORD",
          "C05",
          "memo \"usdt\""
        ],
        [
          "2026-08-28T17:05:27Z",
          "transfer_out",
          -1730,
          7128.62,
          "RTP TO CRYPTO EXCHANGE x3391",
          "C02",
          null
        ],
        [
          "2026-08-29T03:57:36Z",
          "transfer_in",
          640,
          7768.62,
          "TRANSFER FROM EXT ACCT x3391",
          "C02",
          "ACH from linked account in customer's name"
        ],
        [
          "2026-08-29T05:30:14Z",
          "p2p_in",
          1200,
          8968.62,
          "P2P FROM TRAVIS SIMMONS",
          "C13",
          "memo \"usdt\""
        ],
        [
          "2026-08-29T05:49:49Z",
          "transfer_out",
          -1150,
          7818.62,
          "RTP TO CRYPTO EXCHANGE x3391",
          "C02",
          null
        ],
        [
          "2026-08-29T23:55:01Z",
          "p2p_in",
          200,
          8018.62,
          "P2P FROM NATALIE HILL",
          "C14",
          "no memo"
        ],
        [
          "2026-08-30T01:00:14Z",
          "transfer_out",
          -190,
          7828.62,
          "RTP TO CRYPTO EXCHANGE x3391",
          "C02",
          null
        ],
        [
          "2026-08-30T14:40:36Z",
          "p2p_in",
          1500,
          9328.62,
          "P2P FROM DAVID MARTIN",
          "C15",
          "memo \"for Marcus\""
        ],
        [
          "2026-08-30T15:33:20Z",
          "transfer_out",
          -1450,
          7878.62,
          "RTP TO CRYPTO EXCHANGE x3391",
          "C02",
          null
        ],
        [
          "2026-08-30T23:20:29Z",
          "card_purchase",
          -131.9,
          7746.72,
          "AUTOZONE #3360 MESA AZ",
          null,
          "mcc 5533, chip"
        ],
        [
          "2026-08-31T01:40:47Z",
          "card_purchase",
          -35.95,
          7710.77,
          "CIRCLE K #2711 MESA AZ",
          null,
          "mcc 5542, chip"
        ],
        [
          "2026-08-31T17:14:55Z",
          "card_purchase",
          -44.18,
          7666.59,
          "DUTCH BROS #AZ0412 MESA AZ",
          null,
          "mcc 5814, contactless"
        ],
        [
          "2026-09-01T14:00:00Z",
          "ach_debit",
          -1560,
          6106.59,
          "MESA VISTA APTS RENT",
          null,
          "SEC WEB"
        ],
        [
          "2026-09-01T22:50:53Z",
          "card_purchase",
          -17.4,
          6089.19,
          "AMAZON MKTPL*KQFDFD1YH Amzn.com/bill WA",
          null,
          "mcc 5942, card not present"
        ],
        [
          "2026-09-02T21:39:02Z",
          "p2p_in",
          1200,
          7289.19,
          "P2P FROM NATALIE HILL",
          "C14",
          "memo \"ord 84169856\""
        ],
        [
          "2026-09-02T22:29:35Z",
          "transfer_out",
          -1150,
          6139.19,
          "RTP TO CRYPTO EXCHANGE x3391",
          "C02",
          null
        ],
        [
          "2026-09-03T01:45:17Z",
          "transfer_out",
          -150,
          5989.19,
          "TRANSFER TO EXT ACCT x3391",
          "C02",
          "standard ACH to linked account in customer's name; recurring"
        ],
        [
          "2026-09-03T04:39:03Z",
          "p2p_in",
          300,
          6289.19,
          "P2P FROM LINDSEY HERRERA",
          "C03",
          "memo \"trade\""
        ],
        [
          "2026-09-03T05:14:41Z",
          "transfer_out",
          -290,
          5999.19,
          "RTP TO CRYPTO EXCHANGE x3391",
          "C02",
          null
        ],
        [
          "2026-09-03T13:00:00Z",
          "ach_credit",
          1938.27,
          7937.46,
          "SONORAN LINK DIST PAYROLL",
          null,
          "SEC PPD"
        ],
        [
          "2026-09-03T16:53:06Z",
          "p2p_in",
          2000,
          9937.46,
          "P2P FROM BRITTANY FORD",
          "C05",
          "memo \"trade\""
        ],
        [
          "2026-09-03T17:13:09Z",
          "card_purchase",
          -64.53,
          9872.93,
          "FRY'S FOOD #0066 MESA AZ",
          null,
          "mcc 5411, contactless"
        ],
        [
          "2026-09-03T17:55:09Z",
          "transfer_out",
          -1920,
          7952.93,
          "RTP TO CRYPTO EXCHANGE x3391",
          "C02",
          null
        ],
        [
          "2026-09-03T23:40:13Z",
          "card_purchase",
          -186.4,
          7766.53,
          "BANFIELD PET HOSPITAL #1294 MESA AZ",
          null,
          "mcc 0742, chip"
        ],
        [
          "2026-09-04T04:28:37Z",
          "p2p_in",
          600,
          8366.53,
          "P2P FROM SEAN JACKSON",
          "C16",
          "memo \"trade\""
        ],
        [
          "2026-09-04T05:02:54Z",
          "transfer_out",
          -570,
          7796.53,
          "RTP TO CRYPTO EXCHANGE x3391",
          "C02",
          null
        ],
        [
          "2026-09-05T00:04:10Z",
          "p2p_in",
          1500,
          9296.53,
          "P2P FROM JENNIFER SMITH",
          "C09",
          "memo \"ord 44268264\""
        ],
        [
          "2026-09-05T01:11:05Z",
          "transfer_out",
          -1430,
          7866.53,
          "RTP TO CRYPTO EXCHANGE x3391",
          "C02",
          null
        ],
        [
          "2026-09-06T00:09:28Z",
          "p2p_in",
          1200,
          9066.53,
          "P2P FROM DAVID MARTIN",
          "C15",
          "no memo"
        ],
        [
          "2026-09-06T01:01:22Z",
          "transfer_out",
          -1150,
          7916.53,
          "RTP TO CRYPTO EXCHANGE x3391",
          "C02",
          null
        ],
        [
          "2026-09-07T01:23:53Z",
          "card_purchase",
          -62.71,
          7853.82,
          "FRY'S FOOD #0066 MESA AZ",
          null,
          "mcc 5411, contactless"
        ],
        [
          "2026-09-08T14:00:00Z",
          "ach_debit",
          -222.97,
          7630.85,
          "SRP ELECTRIC AUTOPAY",
          null,
          "SEC PPD"
        ],
        [
          "2026-09-09T00:52:49Z",
          "card_purchase",
          -37.81,
          7593.04,
          "FILIBERTO'S #33 MESA AZ",
          null,
          "mcc 5814, chip"
        ],
        [
          "2026-09-09T17:45:35Z",
          "card_purchase",
          -18.18,
          7574.86,
          "DUTCH BROS #AZ0412 MESA AZ",
          null,
          "mcc 5814, contactless"
        ],
        [
          "2026-09-11T10:14:34Z",
          "card_purchase",
          -11.99,
          7562.87,
          "SPOTIFY USA",
          null,
          "mcc 5815, card on file, recurring"
        ],
        [
          "2026-09-11T16:06:57Z",
          "p2p_in",
          800,
          8362.87,
          "P2P FROM HEATHER ROBINSON",
          "C17",
          "memo \"trade\""
        ],
        [
          "2026-09-11T17:14:17Z",
          "transfer_out",
          -760,
          7602.87,
          "RTP TO CRYPTO EXCHANGE x3391",
          "C02",
          null
        ],
        [
          "2026-09-11T21:01:20Z",
          "card_purchase",
          -37.26,
          7565.61,
          "AMAZON MKTPL*8B8ZPS2NP Amzn.com/bill WA",
          null,
          "mcc 5942, card not present"
        ],
        [
          "2026-09-12T04:54:22Z",
          "p2p_in",
          1800,
          9365.61,
          "P2P FROM KEVIN SANDOVAL",
          "C10",
          "memo \"usdt\""
        ],
        [
          "2026-09-12T05:20:29Z",
          "transfer_out",
          -1730,
          7635.61,
          "RTP TO CRYPTO EXCHANGE x3391",
          "C02",
          null
        ],
        [
          "2026-09-13T00:44:31Z",
          "p2p_out",
          -40,
          7595.61,
          "P2P TO TYLER NGUYEN",
          "C18",
          "memo \"gas\""
        ],
        [
          "2026-09-13T05:41:41Z",
          "p2p_in",
          40,
          7635.61,
          "P2P FROM DIEGO CASTELLANO",
          "C19",
          "memo \"gas\""
        ],
        [
          "2026-09-14T05:54:08Z",
          "card_purchase",
          -18.24,
          7617.37,
          "IN-N-OUT MESA #213 MESA AZ",
          null,
          "mcc 5814, contactless"
        ],
        [
          "2026-09-14T14:00:00Z",
          "ach_debit",
          -412.37,
          7205,
          "ALLY AUTO PMT",
          null,
          "SEC PPD"
        ],
        [
          "2026-09-14T21:57:07Z",
          "card_purchase",
          -55.96,
          7149.04,
          "AMAZON MKTPL*2JO1QB7AY Amzn.com/bill WA",
          null,
          "mcc 5942, card not present"
        ],
        [
          "2026-09-15T01:21:20Z",
          "card_purchase",
          -12.24,
          7136.8,
          "TACO BELL #031544 MESA AZ",
          null,
          "mcc 5814, contactless"
        ],
        [
          "2026-09-16T02:08:44Z",
          "p2p_in",
          150,
          7286.8,
          "P2P FROM JENNIFER SMITH",
          "C09",
          "memo \"ord 71217332\""
        ],
        [
          "2026-09-16T03:02:53Z",
          "transfer_out",
          -140,
          7146.8,
          "RTP TO CRYPTO EXCHANGE x3391",
          "C02",
          null
        ],
        [
          "2026-09-17T04:31:28Z",
          "card_purchase",
          -54.24,
          7092.56,
          "CIRCLE K #2711 MESA AZ",
          null,
          "mcc 5542, chip"
        ],
        [
          "2026-09-17T10:09:33Z",
          "card_purchase",
          -24.99,
          7067.57,
          "PLANET FITNESS CLUB FEES",
          null,
          "mcc 7997, card on file, recurring"
        ],
        [
          "2026-09-17T13:00:00Z",
          "ach_credit",
          1964.18,
          9031.75,
          "SONORAN LINK DIST PAYROLL",
          null,
          "SEC PPD"
        ],
        [
          "2026-09-17T17:51:12Z",
          "card_purchase",
          -17.51,
          9014.24,
          "CHIPOTLE 1186 MESA AZ",
          null,
          "mcc 5814, contactless"
        ],
        [
          "2026-09-18T17:32:18Z",
          "card_purchase",
          -47.4,
          8966.84,
          "CHIPOTLE 1186 MESA AZ",
          null,
          "mcc 5814, contactless"
        ],
        [
          "2026-09-18T18:52:34Z",
          "p2p_in",
          1450,
          10416.84,
          "P2P FROM MARJORIE PRESCOTT",
          "C20",
          "no memo"
        ],
        [
          "2026-09-18T19:23:28Z",
          "transfer_out",
          -1380,
          9036.84,
          "RTP TO CRYPTO EXCHANGE x3391",
          "C02",
          null
        ],
        [
          "2026-09-18T19:44:27Z",
          "card_purchase",
          -82.06,
          8954.78,
          "COSTCO WHSE #0429 MESA AZ",
          null,
          "mcc 5300, chip"
        ],
        [
          "2026-09-19T02:02:59Z",
          "card_purchase",
          -18.27,
          8936.51,
          "DUTCH BROS #AZ0412 MESA AZ",
          null,
          "mcc 5814, contactless"
        ],
        [
          "2026-09-19T10:00:28Z",
          "card_purchase",
          -80,
          8856.51,
          "COX COMM PHX",
          null,
          "mcc 4899, card on file, recurring"
        ],
        [
          "2026-09-19T21:58:26Z",
          "p2p_in",
          1800,
          10656.51,
          "P2P FROM DAVID MARTIN",
          "C15",
          "no memo"
        ],
        [
          "2026-09-19T22:33:49Z",
          "card_purchase",
          -46.97,
          10609.54,
          "TALL SAGUARO TAPHOUSE MESA AZ",
          null,
          "mcc 5813, chip"
        ],
        [
          "2026-09-19T22:53:03Z",
          "transfer_out",
          -1720,
          8889.54,
          "RTP TO CRYPTO EXCHANGE x3391",
          "C02",
          null
        ],
        [
          "2026-09-20T00:19:04Z",
          "card_purchase",
          -75.67,
          8813.87,
          "FRY'S FOOD #0066 MESA AZ",
          null,
          "mcc 5411, contactless"
        ],
        [
          "2026-09-20T18:47:10Z",
          "p2p_in",
          400,
          9213.87,
          "P2P FROM JESSICA ELLIS",
          "C21",
          "memo \"concert tickets\""
        ],
        [
          "2026-09-20T19:40:54Z",
          "transfer_out",
          -380,
          8833.87,
          "RTP TO CRYPTO EXCHANGE x3391",
          "C02",
          null
        ],
        [
          "2026-09-20T21:08:06Z",
          "card_purchase",
          -32.47,
          8801.4,
          "TALL SAGUARO TAPHOUSE MESA AZ",
          null,
          "mcc 5813, chip"
        ],
        [
          "2026-09-21T05:49:07Z",
          "p2p_in",
          150,
          8951.4,
          "P2P FROM MADISON HUNT",
          "C22",
          "memo \"thx\""
        ],
        [
          "2026-09-21T06:43:10Z",
          "transfer_out",
          -140,
          8811.4,
          "RTP TO CRYPTO EXCHANGE x3391",
          "C02",
          null
        ],
        [
          "2026-09-21T10:20:38Z",
          "card_purchase",
          -19.99,
          8791.41,
          "MICROSOFT*XBOX",
          null,
          "mcc 5816, card on file, recurring"
        ],
        [
          "2026-09-22T01:31:47Z",
          "card_purchase",
          -44.26,
          8747.15,
          "IN-N-OUT MESA #213 MESA AZ",
          null,
          "mcc 5814, contactless"
        ],
        [
          "2026-09-22T02:45:41Z",
          "p2p_in",
          300,
          9047.15,
          "P2P FROM WHITNEY MORALES",
          "C08",
          "no memo"
        ],
        [
          "2026-09-22T03:34:15Z",
          "transfer_out",
          -280,
          8767.15,
          "RTP TO CRYPTO EXCHANGE x3391",
          "C02",
          null
        ],
        [
          "2026-09-22T16:33:01Z",
          "p2p_in",
          250,
          9017.15,
          "P2P FROM WHITNEY MORALES",
          "C08",
          "memo \"usdt\""
        ],
        [
          "2026-09-22T17:03:09Z",
          "transfer_out",
          -230,
          8787.15,
          "RTP TO CRYPTO EXCHANGE x3391",
          "C02",
          null
        ],
        [
          "2026-09-23T01:12:32Z",
          "card_purchase",
          -42.89,
          8744.26,
          "QT 1452 MESA AZ",
          null,
          "mcc 5542, contactless"
        ],
        [
          "2026-09-23T20:13:48Z",
          "card_purchase",
          -43.61,
          8700.65,
          "QT 1452 MESA AZ",
          null,
          "mcc 5542, contactless"
        ],
        [
          "2026-09-23T21:36:55Z",
          "card_purchase",
          -98.86,
          8601.79,
          "FRY'S FOOD #0066 MESA AZ",
          null,
          "mcc 5411, contactless"
        ],
        [
          "2026-09-24T03:41:43Z",
          "card_purchase",
          -32.77,
          8569.02,
          "TACO BELL #031544 MESA AZ",
          null,
          "mcc 5814, contactless"
        ],
        [
          "2026-09-24T10:05:17Z",
          "card_purchase",
          -65,
          8504.02,
          "T-MOBILE AUTOPAY",
          null,
          "mcc 4814, card on file, recurring"
        ],
        [
          "2026-09-25T19:29:49Z",
          "p2p_in",
          1200,
          9704.02,
          "P2P FROM DAVID MARTIN",
          "C15",
          "memo \"loan\""
        ],
        [
          "2026-09-25T20:38:40Z",
          "transfer_out",
          -1150,
          8554.02,
          "RTP TO CRYPTO EXCHANGE x3391",
          "C02",
          null
        ],
        [
          "2026-09-26T00:45:12Z",
          "card_purchase",
          -21.29,
          8532.73,
          "IN-N-OUT MESA #213 MESA AZ",
          null,
          "mcc 5814, contactless"
        ],
        [
          "2026-09-26T03:53:25Z",
          "transfer_in",
          1150,
          9682.73,
          "TRANSFER FROM EXT ACCT x3391",
          "C02",
          "ACH from linked account in customer's name"
        ],
        [
          "2026-09-26T19:23:11Z",
          "card_purchase",
          -32.29,
          9650.44,
          "TALL SAGUARO TAPHOUSE MESA AZ",
          null,
          "mcc 5813, chip"
        ],
        [
          "2026-09-26T20:04:58Z",
          "p2p_in",
          1200,
          10850.44,
          "P2P FROM DAVID MARTIN",
          "C15",
          "no memo"
        ],
        [
          "2026-09-26T20:42:07Z",
          "transfer_out",
          -1140,
          9710.44,
          "RTP TO CRYPTO EXCHANGE x3391",
          "C02",
          null
        ],
        [
          "2026-09-26T21:43:34Z",
          "card_purchase",
          -20.79,
          9689.65,
          "BEST BUY 00000531 MESA AZ",
          null,
          "mcc 5732, chip"
        ],
        [
          "2026-09-27T02:09:36Z",
          "p2p_in",
          1500,
          11189.65,
          "P2P FROM AARON PEREZ",
          "C23",
          "memo \"usdt\""
        ],
        [
          "2026-09-27T03:07:00Z",
          "transfer_out",
          -1440,
          9749.65,
          "RTP TO CRYPTO EXCHANGE x3391",
          "C02",
          null
        ],
        [
          "2026-09-27T05:56:55Z",
          "card_purchase",
          -50.18,
          9699.47,
          "STEAMGAMES.COM WA",
          null,
          "mcc 5816, card not present"
        ],
        [
          "2026-09-27T21:54:10Z",
          "p2p_in",
          1000,
          10699.47,
          "P2P FROM JENNIFER SMITH",
          "C09",
          "memo \"ord 46879242\""
        ],
        [
          "2026-09-27T22:27:46Z",
          "transfer_out",
          -960,
          9739.47,
          "RTP TO CRYPTO EXCHANGE x3391",
          "C02",
          null
        ],
        [
          "2026-09-28T00:41:46Z",
          "card_purchase",
          -14.15,
          9725.32,
          "DOORDASH*ORDER SAN FRANCISCO CA",
          null,
          "mcc 5814, card not present"
        ],
        [
          "2026-09-28T03:52:26Z",
          "card_purchase",
          -32.34,
          9692.98,
          "FRY'S FOOD #0066 MESA AZ",
          null,
          "mcc 5411, contactless"
        ],
        [
          "2026-09-28T20:33:50Z",
          "card_purchase",
          -91.07,
          9601.91,
          "TARGET 00024419 MESA AZ",
          null,
          "mcc 5310, contactless"
        ],
        [
          "2026-09-29T02:43:28Z",
          "card_purchase",
          -47.11,
          9554.8,
          "QT 1452 MESA AZ",
          null,
          "mcc 5542, contactless"
        ],
        [
          "2026-09-29T22:58:07Z",
          "card_purchase",
          -9.24,
          9545.56,
          "FILIBERTO'S #33 MESA AZ",
          null,
          "mcc 5814, chip"
        ],
        [
          "2026-09-29T23:25:51Z",
          "p2p_in",
          1200,
          10745.56,
          "P2P FROM MADISON MORRIS",
          "C06",
          "no memo"
        ],
        [
          "2026-09-30T00:40:56Z",
          "p2p_in",
          400,
          11145.56,
          "P2P FROM KAREN WELLS",
          "C24",
          "memo \"invoice 4471\""
        ],
        [
          "2026-09-30T01:06:11Z",
          "transfer_out",
          -1520,
          9625.56,
          "RTP TO CRYPTO EXCHANGE x3391",
          "C02",
          null
        ],
        [
          "2026-09-30T05:49:44Z",
          "p2p_in",
          300,
          9925.56,
          "P2P FROM CHARLES FORD",
          "C25",
          "memo \"USDT\""
        ],
        [
          "2026-09-30T06:21:39Z",
          "transfer_out",
          -290,
          9635.56,
          "RTP TO CRYPTO EXCHANGE x3391",
          "C02",
          null
        ],
        [
          "2026-09-30T14:37:01Z",
          "p2p_in",
          1000,
          10635.56,
          "P2P FROM WHITNEY MORALES",
          "C08",
          "memo \"thx\""
        ],
        [
          "2026-09-30T15:26:43Z",
          "transfer_out",
          -950,
          9685.56,
          "RTP TO CRYPTO EXCHANGE x3391",
          "C02",
          null
        ],
        [
          "2026-10-01T00:27:04Z",
          "p2p_in",
          100,
          9785.56,
          "P2P FROM SARA SIMMONS",
          "C26",
          "no memo"
        ],
        [
          "2026-10-01T00:54:01Z",
          "transfer_out",
          -90,
          9695.56,
          "RTP TO CRYPTO EXCHANGE x3391",
          "C02",
          null
        ],
        [
          "2026-10-01T13:00:00Z",
          "ach_credit",
          1964.18,
          11659.74,
          "SONORAN LINK DIST PAYROLL",
          null,
          "SEC PPD"
        ],
        [
          "2026-10-01T14:00:00Z",
          "ach_debit",
          -1560,
          10099.74,
          "MESA VISTA APTS RENT",
          null,
          "SEC WEB"
        ],
        [
          "2026-10-01T14:24:10Z",
          "p2p_in",
          250,
          10349.74,
          "P2P FROM PATRICK BRADLEY",
          "C07",
          "no memo"
        ],
        [
          "2026-10-01T15:31:04Z",
          "transfer_out",
          -240,
          10109.74,
          "RTP TO CRYPTO EXCHANGE x3391",
          "C02",
          null
        ],
        [
          "2026-10-01T22:13:02Z",
          "card_purchase",
          -48.66,
          10061.08,
          "CHIPOTLE 1186 MESA AZ",
          null,
          "mcc 5814, contactless"
        ],
        [
          "2026-10-01T23:46:52Z",
          "card_purchase",
          -42.51,
          10018.57,
          "QT 1452 MESA AZ",
          null,
          "mcc 5542, contactless"
        ],
        [
          "2026-10-02T01:20:56Z",
          "p2p_in",
          900,
          10918.57,
          "P2P FROM EVAN DORSEY",
          "C27",
          "memo \"puppy deposit\""
        ],
        [
          "2026-10-02T01:49:11Z",
          "transfer_out",
          -860,
          10058.57,
          "RTP TO CRYPTO EXCHANGE x3391",
          "C02",
          null
        ],
        [
          "2026-10-02T16:16:36Z",
          "card_purchase",
          -47.73,
          10010.84,
          "COSTCO GAS #0429 MESA AZ",
          null,
          "mcc 5542, chip"
        ],
        [
          "2026-10-03T01:42:36Z",
          "transfer_out",
          -150,
          9860.84,
          "TRANSFER TO EXT ACCT x3391",
          "C02",
          "standard ACH to linked account in customer's name; recurring"
        ],
        [
          "2026-10-04T15:35:34Z",
          "card_purchase",
          -113.7,
          9747.14,
          "FRY'S FOOD #0066 MESA AZ",
          null,
          "mcc 5411, contactless"
        ],
        [
          "2026-10-04T16:33:14Z",
          "card_purchase",
          -44.96,
          9702.18,
          "CIRCLE K #2711 MESA AZ",
          null,
          "mcc 5542, chip"
        ],
        [
          "2026-10-05T17:14:24Z",
          "p2p_in",
          500,
          10202.18,
          "P2P FROM CARLOS DANIELS",
          "C04",
          "no memo"
        ],
        [
          "2026-10-05T17:37:31Z",
          "transfer_out",
          -480,
          9722.18,
          "RTP TO CRYPTO EXCHANGE x3391",
          "C02",
          null
        ],
        [
          "2026-10-05T20:40:28Z",
          "p2p_in",
          750,
          10472.18,
          "P2P FROM DANIEL SCOTT",
          "C28",
          "no memo"
        ],
        [
          "2026-10-05T21:09:53Z",
          "transfer_out",
          -710,
          9762.18,
          "RTP TO CRYPTO EXCHANGE x3391",
          "C02",
          null
        ],
        [
          "2026-10-05T23:29:16Z",
          "card_purchase",
          -55.2,
          9706.98,
          "QT 1452 MESA AZ",
          null,
          "mcc 5542, contactless"
        ],
        [
          "2026-10-06T02:05:13Z",
          "p2p_in",
          500,
          10206.98,
          "P2P FROM CARLOS DANIELS",
          "C04",
          "no memo"
        ],
        [
          "2026-10-06T02:58:35Z",
          "transfer_out",
          -480,
          9726.98,
          "RTP TO CRYPTO EXCHANGE x3391",
          "C02",
          null
        ],
        [
          "2026-10-06T14:00:00Z",
          "ach_debit",
          -193.42,
          9533.56,
          "SRP ELECTRIC AUTOPAY",
          null,
          "SEC PPD"
        ],
        [
          "2026-10-07T02:35:30Z",
          "p2p_in",
          32,
          9565.56,
          "P2P FROM TYLER NGUYEN",
          "C18",
          "memo \"suns tix\""
        ]
      ]
    },
    "reports_from_other_institutions": [
      {
        "received": "2026-09-24T16:55:00Z",
        "type": "P2P network scam claim",
        "from": "Marjorie Prescott's bank (regional bank, OH)",
        "about": "P2P credit of $1,450.00 on 2026-09-18 (C20)",
        "detail": "Sender, 71, says a caller posing as a federal agent told her that her savings were at risk and had her buy cryptocurrency to 'protect' them, giving her this recipient's details to pay. Funds had already left the account when the claim arrived."
      },
      {
        "received": "2026-10-03T15:30:00Z",
        "type": "P2P network scam claim",
        "from": "Evan Dorsey's bank (credit union, TX)",
        "about": "P2P credit of $900.00 on 2026-10-01 (C27)",
        "detail": "Sender says he paid a deposit on a puppy advertised online and the seller stopped answering. Funds had already left the account when the claim arrived."
      },
      {
        "received": "2026-10-05T16:20:00Z",
        "type": "P2P network scam claim",
        "from": "Aaron Perez's bank (regional bank, FL)",
        "about": "P2P credit of $1,500.00 on 2026-09-26 (C23)",
        "detail": "Sender says someone they met on a dating app talked them into a joint cryptocurrency investment and told them to pay this recipient to buy the coins for it; they have since been asked for a 'withdrawal fee'. Funds had already left the account when the claim arrived."
      },
      {
        "received": "2026-10-06T18:10:00Z",
        "type": "314(b) response from the crypto exchange (our request sent 2026-09-26)",
        "from": "Large US crypto exchange (registered money services business)",
        "detail": "The customer's exchange account has been open and identity-verified since 2024-03-02, with small recurring purchases until July 2026. From 2026-07-14 to 2026-10-03 it received $43,800.00 from our customer's account, nearly all used to buy USDT. About 52% of that USDT was withdrawn to deposit addresses belonging to a peer-to-peer crypto marketplace and the rest to 4 private wallets. The exchange's blockchain analytics links one of those wallets, which received 1,927 USDT on 2026-09-03 and 1,734 USDT on 2026-09-11, to a cluster reported for investment scams. The exchange has not restricted the account."
      }
    ],
    "customer_contact": [
      {
        "ts": "2026-10-02T17:15:00Z",
        "channel": "Phone, outbound call from our fraud investigations team",
        "note": "Asked about the many incoming P2P payments. Customer said that since mid-July he has sold USDT on a peer-to-peer crypto marketplace as a side income: buyers pay him by P2P, he releases the coins from the marketplace's escrow when the payment shows, and he buys more at his exchange. He said the marketplace verifies buyers' IDs, that he matches payments by amount and does not read the memos, and that he makes about 3 to 4% a trade. He also trades directly, outside the marketplace and at lower fees, with 'a few regulars' from a chat group. Told him one payment was reported as a scam and that our P2P service is for personal use. He asked whether what he is doing is illegal and agreed to send his trade history. Calm and cooperative throughout."
      },
      {
        "ts": "2026-10-04T22:48:00Z",
        "channel": "Secure message from customer",
        "text": "Here is my trade history from the marketplace (CSV) and screenshots of some chats with my regular buyers. The direct trades are guys from a trading group I've been in since the summer, I've done a lot of trades with them and never had a problem. Some of them pay from their wife's or their business partner's account, that's normal in the group. I didn't know the lady was scammed, I would never take money like that. I'm stopping for now until I hear back from you. If I open a business account can I keep doing this?"
      }
    ],
    "case_notes": [
      {
        "ts": "2026-09-24T17:40:00Z",
        "note": "Alert opened after the first scam claim. Risk rating raised to Medium. Account not restricted."
      },
      {
        "ts": "2026-09-26T21:05:00Z",
        "note": "314(b) request sent to the crypto exchange."
      },
      {
        "ts": "2026-10-06T20:30:00Z",
        "note": "Reconciled the customer's marketplace export (2026-07-14 to 2026-10-03) against our credits. Of 56 credits from others in that period ($45,350.00), 41 ($23,550.00) match a completed sell order by amount and by time (payment marked received within 25 minutes of our credit). The export shows each buyer's marketplace username and an 'ID verified' badge, not the buyer's legal name, so we cannot confirm the payers were the buyers, and the export is a file the customer downloaded himself; the marketplace has not been asked to confirm it. Two of the three scam-claim credits are matched orders, from buyers with 1 and 3 completed trades on the marketplace; the third (Aaron Perez, 2026-09-26) is a direct trade with @bluefin88. The other 15 credits ($21,800.00) have no marketplace order; the customer says they are direct trades with 4 regular buyers from a chat group, but they came from 6 different payers (he says some regulars pay from a relative's or a business partner's account), and he sent chat screenshots covering 6 of them. Sell prices in the export run 2.9% to 6.4% above the exchange's USDT price at the time (median 3.8%). 6 credits carry memos that don't describe a crypto purchase (\"concert tickets\", \"for Marcus\", \"invoice 4471\", \"loan\", \"puppy deposit\", \"rent deposit\"). The exchange's 314(b) reply links the wallet used for two of @desert_otc's direct trades (paid by Brittany Ford and Kevin Sandoval) to an investment-scam cluster. After the call he received 3 more payments on 2026-10-05 from earlier marketplace buyers and moved them to the exchange."
      }
    ],
    "alert": {
      "alert_id": "AML-PT-2026-092417",
      "created": "2026-09-24T17:40:00Z",
      "scenario": "Pass-through activity / possible money mule",
      "status": "In review; decision due",
      "rules_fired": [
        "PT-01 credits from others in 30 days at least 3x expected monthly deposits ($18,640.00 against $4,300)",
        "PT-02 all credits in 30 days at least 2.5x expected monthly deposits ($23,182.45 against $4,300)",
        "PT-04 8 or more first-time senders in 30 days (8)",
        "PT-05 80% or more of credits from others moved out within 48 hours (96%)",
        "PT-09 a sending institution reported an incoming credit as fraud or a scam (1)"
      ],
      "monitoring_model_score": 0.88,
      "last_30_days": {
        "window": "2026-09-07T16:00:00Z to 2026-10-07T16:00:00Z",
        "all_credits_usd": 23050.36,
        "pay_benefits_and_settlements_usd": 3928.36,
        "credits_from_others_usd": 17972,
        "credits_from_others_count": 25,
        "distinct_senders": 19,
        "first_time_senders": 8,
        "expected_monthly_deposits_usd": 4300,
        "credits_from_others_moved_out_within_48h_pct": 96,
        "out_by_p2p_usd": 40,
        "out_by_external_transfer_usd": 17220,
        "out_by_wire_usd": 0,
        "out_as_cash_usd": 0,
        "balance_at_end_usd": 9565.56
      }
    }
  },
  "questions": {
    "is_mule": {
      "type": "noul",
      "instructions": "Is this account being used as a money mule account, receiving money from other people and passing it on to someone else?"
    },
    "holder_role": {
      "type": "choice",
      "instructions": "Which best describes the account holder's part in the money moving through this account?",
      "criteria": {
        "complicit": "The account holder knowingly moves money for others, for example for a cut of each payment or by selling or renting out the account",
        "unwitting": "The account holder moves money for someone else without knowing it is criminal proceeds, for example after being recruited through a fake job offer or an online relationship",
        "not_in_control": "Someone other than the account holder controls the account, for example after an account takeover or because it was opened with a stolen identity",
        "no_mule_activity": "The account is not being used to move other people's money"
      }
    },
    "fraud_proceeds": {
      "type": "score",
      "instructions": "How likely is it that most of the money other people sent to this account came from victims of fraud or scams?",
      "criteria": [
        "Very unlikely (under 10%)",
        "Unlikely (10-40%)",
        "Uncertain (40-60%)",
        "Likely (60-90%)",
        "Very likely (over 90%)"
      ]
    },
    "action": {
      "type": "choice",
      "instructions": "What should the institution do with this account now?",
      "criteria": {
        "monitor": "Keep the account open without restrictions and continue normal monitoring",
        "restrict": "Restrict outbound transfers and cash withdrawals, and contact the customer about the activity",
        "close_and_refer": "Close the account and refer it to the BSA/AML team for a suspicious activity report"
      }
    }
  }
}