Messages
The operator message catalogue, what was found and what to do, for every check, override rule and verdict band
Every forensic check, override rule and verdict band carries an operator-facing message: what
was found (factual) and what to do (the next step). Messages are written for a back-office
case reviewer: plain language, no engineer shorthand. The API returns these on every finding
(findings[].message) and on the result (verdict_message).
Per-tenant message overrides and additional languages are applied on top of this default catalogue where configured. This page shows the defaults.
Checks are grouped by the package (SKU) they belong to. Packages marked "vendor pass-through"
surface a licensed component's own response codes; those codes are listed in the findings
reference you receive at onboarding, not here. Stable check_id values and override-rule ids
are catalogued in check-catalog.json; tolerate unknown codes.
Catalogue version 0.1.0, default locale en. Source: messages-catalog.json.
Checks by package
meta: Quality gate
| Check | Severity | What it means | What to do |
|---|---|---|---|
document_type_mismatch | default | A submitted file does not match the document type it was uploaded as. | Ask the applicant to re-upload the correct document for that slot. |
extraction_quality_low | default | The document could not be read with enough confidence to analyse it fully. | Request a clearer copy of the document. |
required_fields_missing | default | Required fields could not be found in one or more documents. | Request a complete copy showing the missing information. |
image_only_submission | default | A PDF was submitted as a scanned image with no text layer, which limits the checks that can run. | Request a text-based PDF downloaded directly from the issuer. |
page_count_implausible | default | A document has an unexpected number of pages for its type. | Confirm the full document was submitted. |
Q3_EXTRACTION_FAILURE | default | One or more documents could not be processed at all. | Re-submit the failing documents; check they are not corrupted or password-protected. |
extraction_failed | default | A document-reading step did not complete because of a processing error. | Re-submit the affected document; if it recurs, contact support. |
A1: pixel-forensics (vendor pass-through)
A1 passes through a licensed pixel-forensics component, which returns its own set of response codes. These are not enumerated here, the findings reference provided during onboarding lists the full code set and operator guidance. Aletheia surfaces each response under SKU A1.
A2: Simple deterministic forensic checks
| Check | Severity | What it means | What to do |
|---|---|---|---|
mrz_checksum_failure | default | The machine-readable zone (MRZ) on the identity document failed its built-in check-digit validation. | Treat the document as unverified, request a clearer scan or an alternative identity document before proceeding. |
mrz_composite_checksum_unverified | default | The overall (composite) MRZ check digit could not be confirmed, although the document number, date of birth and expiry all validated. | Low concern on its own, investigate only if other identity findings are present. |
| HIGH | The identity document's composite MRZ check digit could not be confirmed. | Re-scan the document at higher resolution or route it to identity review. | |
| INFO | The composite MRZ check digit is unverified; the other three check digits passed. | Treat as low concern unless other identity findings co-occur. | |
national_id_checksum_failure_egn | default | The Bulgarian national identity number (EGN) failed its checksum validation. | The number is likely mistyped or invalid, re-check the document and confirm the number with the applicant. |
national_id_checksum_failure_cnp | default | The Romanian national identity number (CNP) failed its checksum validation. | The number is likely mistyped or invalid, re-check the document and confirm the number with the applicant. |
national_id_checksum_failure_oib | default | The Croatian national identity number (OIB) failed its checksum validation. | The number is likely mistyped or invalid, re-check the document and confirm the number with the applicant. |
national_id_checksum_failure_rodne_cislo | default | The Slovak/Czech birth number (rodné číslo) failed its checksum validation. | The number is likely mistyped or invalid, re-check the document and confirm the number with the applicant. |
national_id_checksum_failure_cpr | default | The Danish personal number (CPR) is not a valid number. | Re-check the document and confirm the number with the applicant. |
sv_nr_invalid | default | The Austrian social-security number (SV-Nr) is not a valid number. | Confirm the number against the source document; a genuine invalid number should be queried with the applicant. |
at_fuehrerschein_era_mismatch | default | The Austrian driving-licence card format does not match its stated year of issue. | Verify the licence; an inconsistent format can indicate a counterfeit. |
identity_name_cross_script_unverifiable | default | The applicant's name is written in a non-Latin script and could not be verified automatically. | Verify the name manually against the source document. |
applicant_name_id_mismatch | default | The applicant name supplied with the case does not match the name on the identity document. | Confirm the correct spelling with the applicant; escalate a genuine mismatch. |
exit_payslip_detected | default | This payslip indicates the applicant's employment has ended (exit / Austritt). | Not a fraud signal, flag to the relationship team that the declared income may no longer be current. |
payslip_period_duplicate | default | Two payslips cover the same pay period. | Request the correct, distinct payslip for each period. |
payslip_period_future_dated | default | A payslip is dated in the future relative to the submission date. | Request a corrected payslip; a future date suggests the document was edited. |
payslip_period_label_mismatch | default | The month shown in the payslip header does not match its payment date. | Request clarification or a corrected payslip. |
lst_secondary_employer_override | default | The wage-tax (Lohnsteuer) deduction looks inconsistent with a single employer, which can be normal for someone with a second job. | No action needed unless the applicant declared only one employer; confirm if in doubt. |
gz_creation_date_backdated | default | The payslip PDF was created at a date inconsistent with its pay period (well before or long after it). | Request an original payslip issued directly by the employer. |
kaz_creation_date_backdated | default | The bank-statement PDF was created before the period it covers had ended, which is not possible for a genuine statement. | Request an original statement downloaded directly from the bank. |
kaz_creation_date_post_print_date | default | The bank-statement PDF was created more than a week after the date printed on it. | Request an original statement from the bank to rule out later editing. |
iban_checksum_fail | default | An IBAN on the document failed its checksum validation and is not a valid account number. | Re-check the IBAN and confirm the correct account number with the applicant. |
iban_blz_not_in_oenb | default | The bank code (BLZ) in the IBAN is not in the Austrian National Bank register. | Verify the account details; the IBAN may be mistyped or non-Austrian. |
address_not_extracted | default | The address could not be read from the bank statement, so the cross-document address check was skipped. | If address confirmation matters for this case, request a clearer copy. |
iban_country_not_allowed | default | The account's country is not on this bank's list of permitted countries. | Review against your onboarding policy for the country in question. |
pensionsbescheid_detected | default | A pension or welfare notice was identified as an income source. | Informational, no action needed. |
pensionsbescheid_amount_missing | default | The pension amount could not be read from the notice. | Request a clearer copy of the pension notice. |
pensionsbescheid_issuing_authority_unrecognized | default | The authority that issued the pension notice is not a recognised Austrian pension body. | Verify the issuer before relying on the notice. |
pdf_timezone_mismatch | default | The time-zone stamps in the PDF timestamps are inconsistent across documents. | Treat as a supporting signal, review alongside other document-authenticity findings. |
bank_iban_payslip_mismatch | default | The account on the payslip does not match the account on the bank statement. | Confirm where the salary is actually paid, a mismatch can indicate income routed elsewhere. |
gz_kaz_sender_iban_mismatch | default | The employer's paying account on the payslip does not appear in any salary credit on the bank statement. | Verify that the salary is paid by the named employer. |
wrong_person_id | default | The identity document appears to belong to a different applicant in this batch. | Escalate, confirm each document is matched to the correct applicant. |
image_source_detected | default | The document was submitted as a photo or image and converted to PDF on intake. | Informational, an original PDF from the issuer is preferable where available. |
phone_camera_capture | default | The document is a phone photo, based on its image metadata. | Informational, request an original PDF if document authenticity is in question. |
scanner_capture | default | The document was produced by scanner software, based on its metadata. | Informational, no action unless other findings are present. |
metadata_absent | default | The image-sourced document has no embedded metadata, which can indicate it was re-saved. | Treat as a supporting signal, request an original if other findings co-occur. |
metadata_datetime_mismatch | default | The image's 'taken' and 'digitised' timestamps differ, indicating the timestamps were altered. | Request an original document; altered timestamps are a tampering signal. |
metadata_edited | default | The image was processed by photo-editing software (for example Photoshop). | Escalate, request an unedited original document. |
gps_coordinates_present | default | The image contains GPS location data. | Informational, can corroborate or contradict the stated location. |
whatsapp_transmission_detected | default | The document shows the fingerprint of having been sent through WhatsApp before submission. | Request the original file; documents routed via messaging apps are re-compressed and harder to verify. |
pending_biometric_viz_dob | default | The date of birth could not be read from the visible part of the identity document. | Confirm the date of birth manually from the document. |
viz_mrz_dob_mismatch | default | The visible date of birth on the ID differs from the date of birth in its machine-readable zone. | Escalate, a mismatch between the two can indicate a tampered document. |
acroform_present | default | The PDF contains fillable form fields, which is common in bank-reprinted documents. | Informational, no action needed for normal bank workflows. |
ms_word_pdf_creator | default | The PDF was created by Microsoft Word, which is common when a document is reprinted. | Informational, no action needed for normal bank workflows. |
print_to_pdf_creator | default | The PDF was produced by a 'print to PDF' tool, which is common in bank workflows. | Informational, no action needed for normal bank workflows. |
microsoft_print_to_pdf_creator | default | The PDF was produced by Microsoft Print to PDF, which is common in bank workflows. | Informational, no action needed for normal bank workflows. |
pdf_timestamp_impossible | default | The PDF's modification date is earlier than its creation date, which is not possible for an untouched file. | Request an original document; the timestamps indicate tampering. |
B1-ext: Fraud-ring, external blacklist (vendor pass-through)
| Check | Severity | What it means | What to do |
|---|---|---|---|
aut_pa_fraud_batch_range | default | The Austrian ID card (Personalausweis) number falls within a confirmed fraud batch reported to the authorities. | Decline or escalate, this card series is on a known-fraud list. |
B1-pool: Fraud-ring, continuous-pool similarity
| Check | Severity | What it means | What to do |
|---|---|---|---|
pa_number_extended_batch_proximity | default | The Austrian ID card number is numerically close to a known fraud batch. | Treat as a supporting signal, review alongside any other findings on this applicant. |
height_cross_match | default | Several applicants in this batch declared an identical height on their ID documents, a pattern consistent with a reused document template. | Review the linked applicants together for a possible fraud ring. |
ring_match_shared_iban_non_household | default | This applicant shares a bank account with another, unrelated applicant. | Escalate, a shared account across unrelated applicants is a fraud-ring signal. |
ring_match_pa_proximity_plus_signals | default | This applicant's ID number clusters with another applicant's within a fraud batch, alongside other matching signals. | Escalate the linked applicants as a possible ring. |
identical_payslip_cross_applicant | default | An identical payslip appears across multiple applicants. | Escalate, duplicate payslips indicate a shared fabrication source. |
shared_employer_cluster | default | This applicant shares an employer with several other unrelated applicants in the batch. | Review the cluster, common for large employers, but corroborate with other signals. |
name_flip_cross_applicant | default | This applicant's name appears as a re-ordered or phonetic variant of another applicant's. | Escalate the linked applicants for possible identity manipulation. |
submission_timestamp_cluster | default | Several applicants submitted within a very short time window. | Review the cluster, coordinated submissions can indicate an intermediary. |
shared_pdf_creator | default | Documents from several applicants were produced by the same non-standard PDF tool. | Escalate, a shared document source points to an intermediary or ring. |
ring_payslip_escalation | default | This applicant was escalated because a linked ring member has a serious payslip anomaly. | Review the linked applicants together. |
workplace_coupling_cluster | default | Applicants share the same payroll account and have phonetically similar names. | Escalate as a possible coordinated ring. |
shared_anonymous_credit_source | default | Several applicants receive credits from the same unidentified source. | Escalate, a shared anonymous payer is a coordinated-ring signal. |
repeat_applicant_iban | default | This account has been seen on a previous applicant in your history. | Review the earlier case, a repeat account may indicate recycled details. |
repeat_applicant_pa_number | default | This ID number has been seen on a previous applicant. | Review the earlier case for recycled identity details. |
repeat_applicant_sv_nr | default | This social-security number has been seen on a previous applicant. | Review the earlier case for recycled identity details. |
repeat_applicant_name | default | This applicant's name matches a previous applicant in your history. | Review the earlier case to confirm whether this is the same person. |
repeat_applicant_address | default | This address has been seen on a previous applicant. | Review the earlier case, a shared address may be a household or a ring. |
same_applicant_resubmission | default | This applicant appears to have submitted before, in this batch or your history. | Review whether this is a duplicate or a repeat application. |
repeat_applicant_employer | default | This employer has been seen on a previous applicant. | Review for a possible shared-employer ring. |
B1-rng: Fraud-ring, within-batch aggregation
| Check | Severity | What it means | What to do |
|---|---|---|---|
ring_deterministic | default | Two or more independent fraud-ring signals link this applicant to others in the batch. | Escalate the linked group for ring review. |
cross_batch_ring | default | Repeat-applicant signals combine to link this applicant to a ring spanning your application history. | Escalate the linked group for ring review. |
B1-bio: Fraud-ring, biometric repeat-fraud
| Check | Severity | What it means | What to do |
|---|---|---|---|
ring_match_biometric | default | This applicant's face or signature matches another applicant in the batch. | Escalate the linked applicants together as a possible fraud ring. |
repeat_applicant_face_biometric | default | This applicant's face matches a previous applicant in your history. | Escalate, a repeat face under a new identity indicates repeat fraud. |
B2: Advanced internal logic
| Check | Severity | What it means | What to do |
|---|---|---|---|
bv_cumulative_doubling | default | The year-to-date contribution total on the payslip doubles and then reverts, a known fabrication pattern. | Decline or escalate; request original payslips directly from the employer. |
bv_cumulative_reversal | default | The year-to-date contribution total decreases from one payslip to the next, which should not happen within a year. | Request corrected payslips; escalate if the figures are not explained. |
gz_arithmetic_mismatch | default | The payslip's net pay does not match its gross pay minus the declared deductions. | Request an updated payslip or the missing deduction line before approving. |
| CRITICAL | The payslip does not add up: net pay is inconsistent with gross pay minus deductions. | Decline or escalate, request an original payslip from the employer. | |
| MEDIUM | There is a small arithmetic gap on the payslip, most likely a missing voluntary deduction. | Confirm with the applicant if the case would otherwise reject; safe to accept on review. | |
gz_arithmetic_not_verified | default | The payslip arithmetic could not be confirmed because some deduction figures were not readable. | Request a clearer copy if you need the arithmetic confirmed; otherwise review manually. |
payslip_period_gap | default | The submitted payslips do not form a continuous recent sequence, one or more periods are missing. | Request the missing payslips to complete the sequence. |
financial_anomaly | default | The declared income is far outside the normal range for the stated occupation. | Escalate for review, verify the employment and salary independently. |
balance_arithmetic_mismatch | default | The bank statement does not balance: the opening balance plus the transactions does not equal the closing balance. | Decline or escalate, request an original statement from the bank. |
credit_before_payslip_date | default | A salary credit appears on the bank statement before the payslip's payment date. | Review for a legitimate advance (Vorschuss); escalate if it is unexplained. |
transactions_after_period_end | default | The statement contains transactions dated after its stated period end, the period heading was likely altered. | Request an original statement from the bank. |
pensionsbescheid_confirmed_by_kaz | default | The pension amount on the notice matches a recurring deposit on the bank statement. | No action, the pension income is corroborated. |
pensionsbescheid_no_kaz_confirmation | default | The pension notice could not be matched to a deposit on the bank statement. | Request a statement showing the pension payment, or confirm the income another way. |
name_inconsistent_cross_doc | default | The names on the submitted documents do not all resolve to the same person. | Confirm the documents belong to one applicant; escalate a genuine mismatch. |
address_mismatch_cross_doc | default | The addresses on the documents do not match. | Escalate, confirm the applicant's current address from an authoritative source. |
dob_mismatch_cross_doc | default | The dates of birth differ across the documents. | Escalate, a date-of-birth mismatch may indicate document substitution. |
employer_salary_missing | default | The expected employer salary could not be found on the bank statement by name or amount. | Verify the employment and that the salary is paid into this account. |
employer_salary_unverified | default | The employer name was not found on the bank statement, although a credit close to the expected net salary is present. | Confirm the credit is the salary from the named employer. |
optical_vs_metadata_date_mismatch | default | The date printed on the document differs from the date stored inside the PDF file. | Review the gap, a large difference suggests the document was re-rendered or back-dated. |
| HIGH | The date printed on the document and the date stored inside the PDF differ substantially. | Request an original document; a large gap indicates back-dating or re-rendering. | |
| INFO | The printed date and the PDF's internal date differ by a small margin. | Low concern, no action needed unless other findings are present. | |
salary_credit_confirmed | default | A salary credit matching the payslip was found on the bank statement. | No action, the income is corroborated. |
salary_credit_not_found | default | The expected salary credit was not found on the bank statement within the matching window. | Request a statement covering the pay date, or confirm where the salary is paid. |
gz_kaz_employer_cross_check | default | The payer of the matched salary credit is not the employer named on the payslip. | Confirm the employment relationship and who actually pays the applicant. |
geographic_incoherence | default | The countries implied by the account, ID, address, employer and phone number are not consistent with each other. | Review the applicant's stated circumstances for an explanation. |
social_media_crosscheck | default | The applicant's social-media presence was assessed for consistency with their declared identity and employer. | Review the assessment alongside the other identity checks. |
employer_internet_search | default | The declared employer was checked against public web sources to confirm it is a real business. | Review the result where the employer could not be confirmed. |
employer_reputation_search | default | Public sources were screened for adverse information about the declared employer. | Review any adverse findings before relying on the employment. |
id_template_nonconformance | default | The identity document's layout does not match the official template for its country. | Escalate to identity review, the document may be counterfeit. |
B3: Third-party externals (vendor pass-through)
| Check | Severity | What it means | What to do |
|---|---|---|---|
ksv1870_person_not_found | default | The applicant was not found in the external person-verification registry. | Verify the applicant's identity by other means. |
ksv1870_person_insolvent | default | The external registry reports the applicant as insolvent. | Factor the insolvency into the credit decision; escalate per policy. |
ksv1870_employer_not_found | default | The declared employer was not found in the business registry. | Verify the employer exists before relying on the employment. |
ksv1870_employer_inactive | default | The business registry reports the declared employer as inactive. | Verify the applicant's current employment status. |
ksv1870_api_unreachable | default | The external person/employer registry could not be reached, so that check did not run. | Retry later if the registry check is required for this case. |
biller_registry_hit | default | A counterparty on the document matched an entry in the biller registry. | Informational, confirms a known biller; no action unless flagged elsewhere. |
umbrella_address_api_unreachable | default | The address-verification service could not be reached, so that check did not run. | Retry later if address verification is required. |
umbrella_address_invalid | default | The address-verification service reports the supplied address as invalid. | Confirm the correct address with the applicant. |
umbrella_address_no_match | default | The address-verification service could not match the supplied address. | Confirm the address with the applicant or an authoritative source. |
B4: Credit-domain signals
| Check | Severity | What it means | What to do |
|---|---|---|---|
failed_debit_detected | default | The statement shows a returned or failed direct debit. | Informational, consider as part of the affordability picture. |
chronic_overdraft | default | The account was overdrawn for sustained periods. | Informational financial-stress signal, weigh it in the affordability assessment. |
sollzinsen_detected | default | Overdraft interest (Sollzinsen) was charged on the account. | Informational, indicates overdraft use during the period. |
failed_debit_pattern | default | The statement shows repeated failed direct debits, indicating insufficient funds. | Escalate, this pattern points to a serious liquidity problem. |
kaz_income_absent_high_expenses | default | The statement shows large recurring outgoings but no salary-level credit, the claimed wage was never deposited. | Escalate, the declared income is not supported by the account. |
B5: AML / regulatory
| Check | Severity | What it means | What to do |
|---|---|---|---|
aml_foreign_remittance | default | The account shows payments to high-risk jurisdictions or via remittance services. | Escalate to Compliance for an anti-money-laundering review. |
anonymous_credit_cluster | default | The account received significant credits with no identifiable payer. | Escalate to Compliance, unexplained incoming funds require review. |
aml_pass_through_account | default | The account shows high in-and-out flow with very little money retained, a money-mule / pass-through pattern. | Escalate to Compliance for an anti-money-laundering review. |
structured_dispersal_cross_applicant | default | Several applicants receive amounts kept just under reporting thresholds from the same source. | Escalate to Compliance, this pattern indicates structuring. |
B6: Compliance vendor bundle (sanctions / PEP / adverse media) (vendor pass-through)
| Check | Severity | What it means | What to do |
|---|---|---|---|
umbrella_aml_api_unreachable | default | The sanctions/AML screening service could not be reached, so that check did not run. | Retry before completing onboarding, AML screening is required. |
umbrella_aml_sanction_hit | default | The applicant matched a sanctions list. | Escalate to Compliance immediately, do not proceed until the case is cleared. |
umbrella_aml_criminal_hit | default | The applicant matched a criminal-records screening. | Escalate to Compliance for review. |
umbrella_aml_pep_hit | default | The applicant matched a politically-exposed-person (PEP) list. | Apply enhanced due diligence per your PEP policy. |
B7: Credit bureau (vendor pass-through)
| Check | Severity | What it means | What to do |
|---|---|---|---|
umbrella_credit_api_unreachable | default | The credit-screening service could not be reached, so that check did not run. | Retry later if a credit check is required. |
umbrella_credit_poor | default | The credit-screening service reports poor credit. | Factor the result into the credit decision per policy. |
B8: Premium OSINT (vendor pass-through)
| Check | Severity | What it means | What to do |
|---|---|---|---|
umbrella_osint_api_unreachable | default | The open-source-intelligence service could not be reached, so that check did not run. | Retry later if OSINT screening is required. |
umbrella_osint_adverse_media | default | Open-source screening found adverse media about the applicant. | Review the adverse findings before proceeding. |
B9: ID Verification
| Check | Severity | What it means | What to do |
|---|---|---|---|
ring_match_same_person_two_ids | default | The same face appears on two different identity documents with different declared identities. | Escalate, this indicates identity stitching. |
wrong_person_biometric | default | The face on the identity document does not match the face on the applicant's other document. | Decline or escalate, this indicates identity substitution. |
signature_overlay_detected | default | The signature appears to have been pasted onto the document rather than signed on it. | Decline or escalate, a pasted signature is a forgery signal. |
Checks of typed case types
Emitted only by typed case types such as grant_settlement, never in an account_application result. See Case types.
| Check | Severity | What it means | What to do |
|---|---|---|---|
unassigned_document | default | A submitted document is not assigned to any role in the case, so it was not checked. | Add the document to the manifest under the right role, or remove it if it does not belong to the case. |
manifest_document_missing | default | The manifest lists a document that was not submitted. | Submit the missing document, or correct the manifest if the document is not part of the case. |
Composite (aggregate) signals
| Signal | Fires when | Severity | Package | What it means | What to do |
|---|---|---|---|---|---|
document_backdated_shared_toolchain | optical_vs_metadata_date_mismatch + shared_pdf_creator (same case) | MEDIUM | B2, B1-pool | The document's visible date disagrees with its file metadata, and it was produced by the same PDF toolchain seen across other applications, together these point to a backdated or mass-produced document. | Request the original issuer-signed PDF; if it cannot be provided, route the case to second-line review. |
payslip_tampering_composite | gz_arithmetic_mismatch + optical_vs_metadata_date_mismatch (same case) | MEDIUM | B2 | The payslip's figures do not reconcile and its visible date contradicts its file metadata, two independent tampering indicators on the same payslip. | Treat the payslip as unverified and request a fresh copy directly from the employer. |
Override-rule explanations
| Rule | What it means | What to do |
|---|---|---|
I1 | The verdict was set to decline because an identity document failed its checksum validation. | Review the failing identity finding; request a valid document. |
P3 | The verdict was set to decline because the payslip shows a year-to-date doubling fabrication pattern. | Request original payslips from the employer. |
B2 | The verdict was set to decline because a document was created at an impossible date relative to its content. | Request an original document issued by the source. |
B3 | The verdict was set to decline because the bank statement contains transactions dated after its stated period. | Request an original statement from the bank. |
B5 | The verdict was set to decline because the bank statement does not balance. | Request an original statement from the bank. |
B11 | The verdict was set to decline because the account shows high expenses but no salary deposit. | Confirm where the declared income is actually paid. |
I9_AT | The verdict was set to decline because the ID number is on a confirmed government fraud list. | Decline and preserve the case in the audit log. |
X_RING | The verdict was set to decline because this applicant is part of a detected fraud ring. | Escalate the linked applicants together. |
W_BIO_REJECT | The verdict was set to decline because the face on the ID does not match the applicant's other document. | Confirm identity in person or with a fresh document. |
S_OVERLAY_REJECT | The verdict was set to decline because a signature appears to have been pasted onto a document. | Request an original signed document. |
I13 | The verdict was set to decline because an identity document belongs to a different person. | Confirm each document is matched to the correct applicant. |
X_REPEAT_IBAN | The verdict was set to decline because this account was used by a previous applicant. | Review the earlier case before proceeding. |
X_REPEAT_BIOMETRIC | The verdict was set to decline because this face matches a previous applicant under a different identity. | Escalate as repeat fraud. |
X_REPEAT_PA | The verdict was set to decline because this ID number was used by a previous applicant. | Review the earlier case before proceeding. |
X_REPEAT_SV | The verdict was set to decline because this social-security number was used by a previous applicant. | Review the earlier case before proceeding. |
X_CROSS_BATCH_RING | The verdict was set to decline because this applicant links to a ring spanning your application history. | Escalate the linked group. |
P5 | The verdict was set to decline because declared income is far outside the normal range for the occupation. | Verify employment and salary independently. |
P4_NV | The verdict was set to 'pass with conditions' because the payslip arithmetic could not be fully confirmed. | Confirm the figures manually if the case is otherwise borderline. |
PB1_CONDITIONAL | The verdict was set to 'pass with conditions' because the pension income could not be fully confirmed. | Request supporting evidence of the pension payment. |
I_CROSS_SCRIPT_CONDITIONAL | The verdict was set to 'pass with conditions' because a name in a non-Latin script could not be verified automatically. | Verify the name manually against the document. |
P6 | The verdict was set to decline because the payslip does not add up. | Request an original payslip from the employer. |
AML1 | The verdict was set to decline because of a high-risk foreign-remittance pattern. | Escalate to Compliance for an AML review. |
AML2 | The verdict was set to decline because of significant unexplained incoming credits. | Escalate to Compliance for an AML review. |
LIQ1 | The verdict was set to decline because of repeated failed debits indicating severe liquidity problems. | Escalate per your affordability policy. |
B10 | The verdict was escalated because a salary credit appears before its payslip date. | Review for a legitimate advance before deciding. |
Q1 | The verdict is pending because a document was submitted as an image with no text layer. | Request a text-based PDF from the issuer and re-submit. |
Q3 | The verdict is pending because one or more documents could not be processed. | Re-submit the failing documents. |
M_EXTRACTION_FAILED_CAP | A document-reading error was treated as informational so it does not by itself change the verdict. | Re-submit the affected document if the rest of the case depends on it. |
C3 | A cross-document address mismatch was treated as a critical finding. | Confirm the applicant's address from an authoritative source. |
M8_ACROFORM | Fillable form fields in the PDF were treated as informational only. | No action, common in bank-reprinted documents. |
M9_WORD | A document produced by Word or a print-to-PDF tool was treated as informational only. | No action, common in bank workflows. |
M9_WORD_CONDITIONAL | A document produced by Word or a print-to-PDF tool was treated as a minor condition rather than a fraud signal. | No action unless other findings are present. |
X10_CRYPTO | An isolated crypto-related transaction was treated as informational only. | No action unless it is part of a wider pattern. |
F13 | The verdict was raised to escalate as a safety net because at least one serious finding was present. | Review the findings list and route to second-line review. |
F14 | The verdict was set to decline as a safety net because several income-evidence findings occurred together. | Review the combined findings; request original documents. |
Verdict bands
| Verdict | What it means | What to do |
|---|---|---|
| REJECT | Fraud or forgery was confirmed by one or more deterministic checks. | Decline the application and preserve the evidence in your audit log. |
| ESCALATE | There is enough concern to require human review before a decision. | Route the case to your second-line review team. |
| PENDING | Analysis could not be completed, a document was unreadable or incomplete. | Re-submit a clearer copy of the failing document, then re-run. |
| CONDITIONAL | The case passes with caveats, minor anomalies are present. | Accept, and review the findings if your policy requires. |
| PASS | All checks passed. | Accept without further forensic review. |