{
  "body_html": "<h2>Transaction Monitoring</h2>\n<p>You review all transaction activity periodically. This is separate from the daily supervisor review.</p>\n<p><strong>Flag these transactions immediately:</strong></p>\n<ol>\n<li>Single cash transactions between <strong>$8,000–$9,999</strong> (sub-CTR alert)</li>\n<li>Same-day transactions from one customer totaling <strong>$10,000 or more</strong> (possible structuring)</li>\n<li>Customers cashing more than <strong>five checks in any 30-day period</strong></li>\n<li>Multiple checks from the <strong>same corporate account</strong> cashed within one week</li>\n<li>Any transaction of <strong>$5,000 or more</strong> from a <strong>first-visit customer</strong></li>\n<li>Customers with addresses <strong>outside Rapido Facil Exchange Co.'s primary service area</strong></li>\n</ol>\n<p><strong>Also flag these check cashing patterns:</strong></p>\n<ol>\n<li>Sequentially numbered payroll checks from unrelated individuals</li>\n<li>Business checks with amounts inconsistent with known payroll cycles or headcount</li>\n<li>Government benefit checks presented by third parties claiming power of attorney</li>\n<li>Corporate checks without prior workers' compensation verification</li>\n<li>Customers who previously failed CIP or were declined and are presenting again</li>\n<li>Multiple customers presenting checks from the same employer without a group payroll explanation</li>\n</ol>\n<p><strong>When a supervisor escalates an alert:</strong></p>\n<ol>\n<li>Review transaction history, prior alert records, and CIP documentation.</li>\n<li>Conduct open-source inquiry as needed.</li>\n<li>Assign one of three dispositions:</li>\n</ol>\n<ul>\n<li><strong>Cleared</strong> — no suspicious activity identified</li>\n<li><strong>SAR filed</strong> — suspicious activity confirmed; initiate SAR filing and attach the alert record to the case file</li>\n<li><strong>Continued monitoring</strong> — inconclusive; flag for 30-day follow-up</li>\n</ul>\n<ol>\n<li>Document every disposition. Undocumented dispositions leave no record of resolution.</li>\n</ol>\n<p><strong>Maintain these four records:</strong></p>\n<ul>\n<li><strong>Alert log</strong> — all flagged transactions with triggering parameter, date, disposition, and reviewer identity</li>\n<li><strong>Investigation file</strong> — transaction records, CIP copies, and investigation notes</li>\n<li><strong>SAR referral log</strong> — cross-references alerts with SAR case numbers</li>\n<li><strong>Threshold review log</strong> — all threshold adjustments with supporting analysis</li>\n</ul>\n<p><strong>Retain all records for five years.</strong> Records not retained for five years cannot be produced during an examination.</p>\n<p><strong>Review all thresholds annually</strong>, after significant changes in volume, customer mix, or regulatory guidance. Adjust thresholds outside the annual cycle when the false positive rate exceeds 40% over any 90-day window, or when confirmed-suspicious capture falls below 80% over any 90-day window.</p>",
  "narration_text": "You review all transaction activity periodically. This is separate from the daily supervisor review.\r\n\r\nFlag these transactions immediately:\r\n\r\nSingle cash transactions between $8,000–$9,999 (sub-CTR alert)\r\nSame-day transactions from one customer totaling $10,000 or more (possible structuring)\r\nCustomers cashing more than five checks in any 30-day period\r\nMultiple checks from the same corporate account cashed within one week\r\nAny transaction of $5,000 or more from a first-visit customer\r\nCustomers with addresses outside Rapido Facil Exchange Co.'s primary service area\r\n\r\nAlso flag these check cashing patterns:\r\n\r\nSequentially numbered payroll checks from unrelated individuals\r\nBusiness checks with amounts inconsistent with known payroll cycles or headcount\r\nGovernment benefit checks presented by third parties claiming power of attorney\r\nCorporate checks without prior workers' compensation verification\r\nCustomers who previously failed CIP or were declined and are presenting again\r\nMultiple customers presenting checks from the same employer without a group payroll explanation\r\n\r\nWhen a supervisor escalates an alert:\r\n\r\nReview transaction history, prior alert records, and CIP documentation.\r\nConduct open-source inquiry as needed.\r\nAssign one of three dispositions:\r\n   - Cleared — no suspicious activity identified\r\n   - SAR filed — suspicious activity confirmed; initiate SAR filing and attach the alert record to the case file\r\n   - Continued monitoring — inconclusive; flag for 30-day follow-up\r\nDocument every disposition. Undocumented dispositions leave no record of resolution.\r\n\r\nMaintain these four records:\r\n\r\nAlert log — all flagged transactions with triggering parameter, date, disposition, and reviewer identity\r\nInvestigation file — transaction records, CIP copies, and investigation notes\r\nSAR referral log — cross-references alerts with SAR case numbers\r\nThreshold review log — all threshold adjustments with supporting analysis\r\n\r\nRetain all records for five years. Records not retained for five years cannot be produced during an examination.\r\n\r\nReview all thresholds annually, after significant changes in volume, customer mix, or regulatory guidance. Adjust thresholds outside the annual cycle when the false positive rate exceeds 40% over any 90-day window, or when confirmed-suspicious capture falls below 80% over any 90-day window."
}