H

HoldLine

Human decides. AI explains. Every payment logged before it settles.

Real-Time Rail rules in force · 24 Aug 2026brief: rules engine

Pre-send queue

10 awaiting review
TDPMT-24081e-Transfer · submitted 01:12 p.m.
High risk
SubmittedAnalyst gateAuto-deposited, not recallable
100
risk
Typology
Bank / CRA impersonation (safe account)
From
Margaret Okafor, 71, 23y client
To
CRA Settlement Desk (added 2d ago)
Amount
$9,400 CAD
Device
Android, first seen 41 min ago
Memo
“CRA settlement URGENT move to safe account today”
Analyst brief
source: rules engine
Hold $9,400 e-Transfer: pattern matches Bank / CRA impersonation (safe account).

Risk 100/100. Margaret Okafor is sending $9,400 to CRA Settlement Desk. Strongest signals: Bank / CRA / safe-account phrasing, New payee, Urgency language. The combination is consistent with Bank / CRA impersonation (safe account). Auto-deposit means this e-Transfer is gone the moment it is accepted. A two-minute call with the client before release costs far less than a dispute after settlement.

Signals
  • +40Bank / CRA / safe-account phrasingMemo or payee mimics a bank, CRA or fraud department. No institution asks clients to move money to a safe account.
  • +30New payeePayee added 2d ago (cra.settle.desk@proton.me)
  • +20Urgency languageMemo pressures immediate action: "CRA settlement URGENT move to safe account today"
  • +15Large amount$9,400 is above the $5,000 review threshold
  • +15New deviceAndroid, first seen 41 min ago
  • +10High velocity3 outbound payments in 24h
  • +10Vulnerable client71-year-old client, 23y tenure, atypical pattern
Call script
  1. 1Hi Margaret, this is the TD payments team. We paused a $9,400 e-Transfer to CRA Settlement Desk for a quick check. Nothing is wrong with your account.
  2. 2Did someone contact you today claiming to be from the bank, the CRA or the police, and ask you to move money to keep it safe?
  3. 3Neither the bank nor the CRA will ever ask you to move money to a safe account. That request is always a scam.
  4. 4We recommend we cancel this transfer. Would you like us to report the number that called you?
Recommended: hold. The analyst decides.
This session
$0
stopped before settlement
10
Pending
0
Held
0
Escalated
0
Released

Audit log

holdline-triage-01 · read-only

No decisions yet. Every hold, release and escalation is written here with the score and the brief's source.

$704M
fraud losses reported to the Canadian Anti-Fraud Centre in 2025, a record
1.4B+
Interac e-Transfer transactions in 2024, $550B+ in value
seconds
to irrevocable settlement once a payment hits the Real-Time Rail
Human accountable

The model never releases or holds a payment. An analyst clicks, and their name is on the log entry.

Least privilege

The triage agent runs under its own identity with read-only scope over the pending queue. It cannot move money.

Logged activity

Every score, brief source and decision is written to an append-only audit trail before settlement.

Designed around OSFI's 2026 expectations for AI and agent use at federally regulated financial institutions. Synthetic data only; bank names are used descriptively and no institution is affiliated with this project.