Unit21

Skip the buzzwords and get to work: connect your payments, account events, and identity checks to Unit21 through a straightforward REST API or flat file upload. Map fields once, test in a staging space, and promote to production when you’re ready. Choose from a large catalog of prebuilt detection templates—ranging from velocity and behavioral patterns to anomaly-based models—or craft your own conditions with boolean logic and dynamic parameters. Segment by product, geography, or risk tier, and set alert thresholds that match your appetite. Preview anticipated alert volumes before turning anything on, so your team isn’t flooded on day one.

Once signals start firing, analysts operate in a clean dashboard. Alerts arrive with key context: triggering logic, entities involved, relevant transactions, and a timeline of recent activity. Triage in bulk using queues and filters, then open a case with one click when deeper review is needed. Add notes, attach supporting documents, assign owners, and set due dates to keep investigations moving. Link multiple alerts into a single case to avoid duplicate effort. Record outcomes and reasons on closure; use those dispositions to fine-tune rules, adjust thresholds, or suppress noisy patterns without losing coverage.

Plug risk data into the flow without heavy lifting. Use built‑in connectors for document verification and identity checks, sanction and PEP screening, adverse media, and external watchlists. For crypto businesses, query blockchain forensics to understand source of funds and wallet exposure, then feed those insights back into your detections. Enrich alerts automatically with third‑party risk signals so analysts don’t have to swivel between tools. Configure step‑up checks—like re‑verification or additional documentation—when specific triggers fire, keeping friction targeted and compliant.

Measure and iterate with operational clarity. Build scheduled reports that track alert counts, clearance times, false positive rates, and exposure by customer segment. Export case histories and full audit trails for internal reviews or regulators. Tune performance by adjusting parameters, testing new rules on a subset of traffic, and rolling out changes with change logs. Typical patterns: a fintech monitors ACH and card flows for mule activity; a crypto exchange flags high‑risk wallet clusters and rapid layering; a marketplace watches payout abuse and account takeovers; a lender verifies identities, screens applicants, and monitors disbursements and repayments. When you need help, reach support through fast channels to troubleshoot integrations, refine detectors, or request features—and get back to running your risk program, not wrestling with tooling.