{
  "alert_id": "FA-73180",
  "created_at": "2026-03-28T02:14:33Z",
  "queue": "BA-Fraud-P1",
  "priority": "P1",
  "store_id": "st_81348",
  "merchant_name": "Phoenix Arc Consulting",
  "merchant_id": "5747524",
  "rule_triggered": "trx_volume_eur_l30m",
  "rule_description": "EUR transaction volume exceeded €10,000 in 30-minute window",
  "risk_score": 87,
  "transaction_summary": {
    "count_30min": 26,
    "total_amount_eur": 18166.98,
    "unique_cards": 8,
    "avg_amount": 68.19,
    "decline_rate": "9.7%",
    "card_present": false,
    "terminal_type": "Sunmi P2 Pro"
  },
  "pattern_flags": [
    "Multiple low-value transactions in rapid succession",
    "High decline rate suggests possible card testing",
    "All transactions chip-and-PIN (consistent with legitimate use)"
  ],
  "related_alerts": [
    {
      "alert_id": "FA-48350",
      "date": "2026-03-18",
      "rule": "card_testing_1d",
      "outcome": "Confirmed Fraud"
    },
    {
      "alert_id": "FA-68327",
      "date": "2026-03-10",
      "rule": "geolocation_mismatch",
      "outcome": "False Positive"
    }
  ],
  "analyst_notes": "Store Phoenix Arc Consulting had a similar velocity alert 2 weeks ago (resolved as FP — legitimate busy period). However, the decline rate of 10.7% is higher than last time (was 4.2%). The 22 unique cards in 30 minutes is also elevated. Possible smurfing pattern if cards are linked. Need to check if cards share BIN range.",
  "investigation_status": "UNDER_REVIEW",
  "action_required": "Review transaction pattern. Check BIN distribution. Determine if legitimate busy period or card testing/smurfing."
}