Cluster Intelligence
Groups of subjects, accounts and reports the system has connected · a cluster is a hypothesis until an analyst confirms it
Clusters
47
15 in the working registry
Awaiting disposition
5
oldest 211 days
Confirmed
10
analyst-verified links
Rejected as noise
0
fed back to tuning
Cases from clusters
12
12 months
15 clustersReading register…
| Score | Cluster & basis | Typology | Members | Reports | Exposure | State |
|---|---|---|---|---|---|---|
83 | CLU-1001TBML Network 01 Over-invoiced export LCs across 3 correspondent banks | TBML | 14 | 3 | $18.4M | Under Investigation |
64 | CLU-1002TBML Network 02 Import/export entities share 2 common directors | TBML | 9 | 1 | $7.8M | Monitoring |
81 | CLU-1003Crypto Network 01 Bank accounts funneling into 6 VASP wallets | Crypto | 18 | 2 | $4.2M | Under Investigation |
60 | CLU-1004Crypto Network 02 Cross-border P2P stablecoin transfers | Crypto | 11 | 1 | $2.9M | Monitoring |
94 | CLU-1005Terrorist Financing Network NPO remittance channel to high-risk corridor | TF | 12 | 4 | $1.3M | Escalated — Enforcement Referral |
95 | CLU-1006Sanctions Exposure Network OFAC SDN direct match | Sanctions | 8 | 3 | $3.1M | Active Supervisory Case |
87 | CLU-1007PEP Network 01 PEP Tier-2 designation | PEP | 16 | 9 | $14.6M | Escalated — Enforcement Referral |
82 | CLU-1008Suspicious Transaction Network Same-day multi-bank pass-through | AML | 31 | 5 | $26.7M | Under Investigation |
66 | CLU-1009Common Ownership Network 4 common ultimate beneficial owners across 22 entities | Ownership | 22 | 2 | $8.9M | Monitoring |
85 | CLU-1010Cross-Border Flow Network Funds layered through 7 jurisdictions | Cross-border | 19 | 4 | $42.1M | Under Investigation |
59 | CLU-1011Shell Company Network Incorporated under 6 months before high-value activity | AML | 15 | 1 | $6.1M | Monitoring |
79 | CLU-1012High-Risk Jurisdiction Network Offshore beneficial ownership concealment | Geography | 13 | 2 | $11.3M | Under Investigation |
68 | CLU-1013Circular Transaction Network Funds cycle through the same 4 entities within 72 hours | Transaction | 10 | 2 | $9.6M | Monitoring |
77 | CLU-1014Banking Relationship Network Same 27 entities recur across 5 unaffiliated banks | Cross-bank | 27 | 6 | $19.2M | Under Investigation |
75 | CLU-1015STR Concentration Network Same subjects recur across 34 independently-filed STRs | Regulatory | 17 | 34 | $5.4M | Active Supervisory Case |
Showing 15 of 47
Clusters awaiting disposition
CLU-1002TBML Network 02
211 days old
CLU-1004Crypto Network 02
148 days old
CLU-1009Common Ownership Network
204 days old
CLU-1011Shell Company Network
137 days old
How clusters are formed
Shared identifierHIGH
Same NID, registration number, account or wallet across reports
Shared controlHIGH
Common director, beneficial owner or signatory across entities
Transaction adjacencyMEDIUM
Funds move directly between the subjects within a short window
Behavioural similarityLOW
Suggestive only; never sufficient alone — matching typology, timing or structuring pattern across otherwise unrelated subjects
Co-appearanceLOW
Subjects named together in the same report, alert or open-source finding
A cluster is machine-proposed. It carries no evidential weight until an analyst confirms it — confirming does not mean the underlying suspicion is proven, only that the linkage itself is real.