{
  "model": "grayson-1",
  "context": {
    "alert": {
      "id": "alrt_88412",
      "created": "2026-10-06T14:05:00Z",
      "rules": [
        "Dormant account reactivated: more than $5,000 in credits within 30 days after 12 or more months without customer activity",
        "5 or more first-time senders in 14 days",
        "80% or more of incoming funds moved out within 48 hours"
      ]
    },
    "customer": {
      "customer_id": "cus_58213",
      "customer_since": "2018-04-11",
      "occupation": "Part-time retail sales associate",
      "stated_annual_income_usd": 24000,
      "expected_monthly_deposits_usd": 1500,
      "identity_verified": true,
      "prior_alerts": 0,
      "contact_details_changed_last_12_months": false
    },
    "account": {
      "account": "Personal checking x4821",
      "history": "Payroll and everyday spending until June 2025, then no customer-initiated activity from 2025-06-30 to 2026-09-15",
      "balance_on_2026_09_15_usd": 38.12,
      "payroll_deposits_since_reactivation": 0,
      "p2p_daily_send_limit_usd": 2500,
      "linked_transfer_rule": "Transfers over $2,500 to linked external accounts are released after 1 business day"
    },
    "devices_and_logins": {
      "devices": [
        {
          "device": "iPhone 12",
          "first_seen": "2021-11-03",
          "other_customers_seen_on_device": 0
        }
      ],
      "logins_since_reactivation": "All from the customer's home metro area, all on the iPhone 12"
    },
    "linked_external_accounts": [
      {
        "type": "Crypto exchange account",
        "added": "2026-09-16T23:40:00Z",
        "name_on_account": "Matches the customer",
        "other_customers_linking_it": 0
      }
    ],
    "activity": [
      {
        "ts": "2026-09-15T23:02:00Z",
        "type": "login",
        "detail": "First login since 2025-06-30, on the customer's usual iPhone"
      },
      {
        "ts": "2026-09-16T23:40:00Z",
        "type": "linked_account_added",
        "detail": "Crypto exchange account in the customer's name, verified by micro-deposits"
      },
      {
        "ts": "2026-09-17T15:02:00Z",
        "type": "p2p_in",
        "amount_usd": 1850,
        "from": "D. Larkin",
        "first_time_sender": true,
        "memo": "apartment deposit"
      },
      {
        "ts": "2026-09-17T22:15:00Z",
        "type": "transfer_to_linked_account",
        "amount_usd": 1660,
        "to": "Crypto exchange account"
      },
      {
        "ts": "2026-09-19T13:44:00Z",
        "type": "p2p_in",
        "amount_usd": 2400,
        "from": "S. Pruitt",
        "first_time_sender": true,
        "memo": "invoice 2291"
      },
      {
        "ts": "2026-09-19T20:02:00Z",
        "type": "transfer_to_linked_account",
        "amount_usd": 2160,
        "to": "Crypto exchange account"
      },
      {
        "ts": "2026-09-23T16:10:00Z",
        "type": "ach_credit",
        "amount_usd": 4800,
        "from": "Brookhollow Dental Group PLLC",
        "first_time_sender": true,
        "addenda": "INV 1043 EQUIPMENT"
      },
      {
        "ts": "2026-09-24T15:30:00Z",
        "type": "transfer_to_linked_account",
        "amount_usd": 4320,
        "to": "Crypto exchange account",
        "note": "Over $2,500: held 1 business day, released 2026-09-25"
      },
      {
        "ts": "2026-09-26T14:25:00Z",
        "type": "p2p_in",
        "amount_usd": 975,
        "from": "T. Brandt",
        "first_time_sender": true,
        "memo": "car deposit"
      },
      {
        "ts": "2026-09-26T19:10:00Z",
        "type": "scam_warning_shown",
        "detail": "Shown before the first payment to a new P2P payee. Customer chose 'I know this person' and continued"
      },
      {
        "ts": "2026-09-26T19:12:00Z",
        "type": "p2p_out",
        "amount_usd": 880,
        "to": "C. Rowe",
        "payee_added": "2026-09-26T19:08:00Z"
      },
      {
        "ts": "2026-09-29T17:31:00Z",
        "type": "p2p_in",
        "amount_usd": 2150,
        "from": "L. Fenwick",
        "first_time_sender": true,
        "memo": "1st month + deposit"
      },
      {
        "ts": "2026-09-30T12:05:00Z",
        "type": "p2p_in",
        "amount_usd": 1200,
        "from": "K. Mercer",
        "first_time_sender": true,
        "memo": "invoice"
      },
      {
        "ts": "2026-09-30T15:40:00Z",
        "type": "transfer_to_linked_account",
        "amount_usd": 3000,
        "to": "Crypto exchange account",
        "note": "Over $2,500: held 1 business day, released 2026-10-01"
      },
      {
        "ts": "2026-10-01T13:22:00Z",
        "type": "secure_message",
        "from": "customer",
        "text": "Why is my transfer to my exchange account still pending? I process payments for my employer's clients and I'm supposed to send them out the same day."
      },
      {
        "ts": "2026-10-01T14:05:00Z",
        "type": "secure_message",
        "from": "bank",
        "text": "Transfers over $2,500 to linked external accounts are released after one business day. Your transfer will be available tomorrow."
      },
      {
        "ts": "2026-10-02T15:48:00Z",
        "type": "ach_credit",
        "amount_usd": 3250,
        "from": "Quarry Lane Tile & Stone LLC",
        "first_time_sender": true,
        "addenda": "PMT INV 7781"
      },
      {
        "ts": "2026-10-03T14:10:00Z",
        "type": "transfer_to_linked_account",
        "amount_usd": 2450,
        "to": "Crypto exchange account"
      },
      {
        "ts": "2026-10-03T14:31:00Z",
        "type": "atm_withdrawal",
        "amount_usd": 475
      },
      {
        "ts": "2026-10-05T13:20:00Z",
        "type": "p2p_in",
        "amount_usd": 2900,
        "from": "A. Holloway",
        "first_time_sender": true,
        "memo": "deposit"
      },
      {
        "ts": "2026-10-05T18:02:00Z",
        "type": "p2p_out",
        "amount_usd": 2450,
        "to": "C. Rowe"
      },
      {
        "ts": "2026-10-05T18:20:00Z",
        "type": "atm_withdrawal",
        "amount_usd": 160
      },
      {
        "ts": "2026-10-06T12:15:00Z",
        "type": "recall_request",
        "detail": "The sender's bank asks for the return of the 2026-09-29 P2P credit of $2,150.00 from L. Fenwick. The sender reports paying a deposit on a rental listing that turned out not to exist."
      },
      {
        "ts": "2026-10-06T13:52:00Z",
        "type": "p2p_in",
        "amount_usd": 2600,
        "from": "B. Yates",
        "first_time_sender": true,
        "memo": "for the car"
      }
    ],
    "summary_since_2026_09_15": {
      "credits_from_others": 9,
      "distinct_senders": 9,
      "credits_from_others_usd": 22125,
      "received_before_today_usd": 19525,
      "moved_out_within_48_hours_usd": 17555,
      "debit_card_purchases": "14 purchases, $1,912.60: grocery, fuel, phone bill, restaurants",
      "balance_before_2026_10_06_credit_usd": 95.52,
      "current_balance_usd": 2695.52
    }
  },
  "questions": {
    "is_mule": {
      "type": "noul",
      "instructions": "Is this account being used as a money mule account, receiving money from other people and passing it on to someone else?"
    },
    "holder_role": {
      "type": "choice",
      "instructions": "Which best describes the account holder's part in the money moving through this account?",
      "options": {
        "complicit": "The account holder knowingly moves money for others, for example for a cut of each payment or by selling or renting out the account",
        "unwitting": "The account holder moves money for someone else without knowing it is criminal proceeds, for example after being recruited through a fake job offer or an online relationship",
        "not_in_control": "Someone other than the account holder controls the account, for example after an account takeover or because it was opened with a stolen identity",
        "no_mule_activity": "The account is not being used to move other people's money"
      }
    },
    "fraud_proceeds": {
      "type": "score",
      "instructions": "How likely is it that most of the money other people sent to this account came from victims of fraud or scams?",
      "levels": [
        "Very unlikely (under 10%)",
        "Unlikely (10-40%)",
        "Uncertain (40-60%)",
        "Likely (60-90%)",
        "Very likely (over 90%)"
      ]
    },
    "action": {
      "type": "choice",
      "instructions": "What should the institution do with this account now?",
      "options": {
        "monitor": "Keep the account open without restrictions and continue normal monitoring",
        "restrict": "Restrict outbound transfers and cash withdrawals, and contact the customer about the activity",
        "close_and_refer": "Close the account and refer it to the BSA/AML team for a suspicious activity report"
      }
    }
  }
}