Prerequisites
Permissions to View/Edit Alerts Settings required
Overview
The Immediate Withdrawal alert detects players who deposit funds and quickly withdraw a significant portion within a short time frame. This behavior is often associated with misuse of online gaming accounts to move money rather than engage in legitimate play.
This alert is especially relevant for online environments and is similar to the Minimal Play alert but focuses specifically on rapid fund movement. You can configure the alert by setting thresholds for transaction amount, time between deposit and withdrawal, and the percentage of funds withdrawn.
For Active Alerts
If Active alerts are turned on for your organization, the immediate withdrawal alert is set up in Settings > Alerts (Beta). Choose the property at the top of the page, then open the Immediate Withdrawal card. The card has four tabs:
Detection criteria – The Detection window (the standard number of days, or a Custom window), the Transaction threshold, the Time period and the Minimum withdrawal ratio. Activity that meets these is recorded as an event.
Risk assessment – The Contributing risk factors, including the Occurrence interval, each with a weight. This alert type has no mitigating risk factors. Together with the detection criteria, they produce the event's Confidence Score.
Escalation qualification – The Threshold score an event's Confidence Score must reach to become an alert. If pattern qualification is available for your property, you can also require a Minimum qualifying events count within an Evaluation period before an alert is produced.
Escalation prioritization – The High priority threshold. Alerts at or above this Confidence Score are marked High Priority.
On Active alerts, this alert type can include the Cash - Denominations contributing factor. It looks for cash transactions in the bill denominations set in your alert settings. For details, see the contributing factors article.
Steps to Configure Immediate Withdrawal Alert
Access the Alert Settings Page
Click the gear icon in the bottom-left navigation bar
Select the AML module
Click Alerts (Beta) in the left-hand menu
Choose the property at the top of the page, then open the Immediate Withdrawal card.
Set the Detection Window
Defines how far back the system looks for transactions each time alerts are run
A common setting is 30 days
The alert window should be equal to or longer than the frequency of alert runs
A shorter window may result in gaps in analysis
Consult your Client Success Manager before reducing the window below 30 days
Configure the Detection Criteria
Transaction threshold: Sets the minimum transaction amount required to produce an event
Helps filter out low-risk activity
Ask: What is the smallest amount of immediate withdrawal activity that would justify filing a SAR?
Set the Time Period and Minimum Withdrawal Ratio
Time period: Set the time in minutes after an inbound transaction within which a withdrawal counts as immediate
Minimum withdrawal ratio: Set the percentage of the deposit that was withdrawn. You can turn it off with the checkbox to its left, and it has a weight
Together with the Transaction threshold, these set the base Confidence Score: larger amounts moved faster produce higher scores
Set the Contributing Risk Factors
Contributing risk factors increase the Confidence Score. On Active alerts, a higher score can decide whether an event is escalated to an alert.
Includes standard contributing risk factors used across most alerts
Also includes a unique factor: Occurrence interval
This sets the minimum number of occurrences needed to increase the Confidence Score
Mitigating Risk Factors
There are no mitigating risk factors for this alert
For more information on how contributing factors influence the Confidence Score, see the knowledge base article How is the alert score calculated.
Expected Result
Once configured, the system will record an Immediate Withdrawal event when a player meets the defined criteria. On Active alerts, the event becomes an alert if its Confidence Score reaches the Threshold score. The Confidence Score will reflect the influence of the detection criteria and the contributing risk factors. If no qualifying activity is found, no alert will be produced.
Frequently Asked Questions
How is this different from the Minimal Play alert?
The Immediate Withdrawal alert focuses on rapid fund movement, while the Minimal Play alert evaluates low wagering activity over time. Both detect suspicious behavior but use different criteria.
Will multiple alerts generate if a player repeatedly deposits and withdraws within a short time frame?
Not for the same activity. If a new event repeats an earlier Immediate Withdrawal event for the same player within an overlapping detection window, Kinectify treats it as a duplicate and does not create a second alert. The duplicate is recorded in the Non-Escalated Events log. New activity outside that overlap can produce a new event.
How should I set the Transaction threshold?
The alert's Analytics tab shows the rule as a deposit amount, for example deposit ≥ $10,000, so set the Transaction threshold to the deposit amount you want to monitor.