Field notes · 17 March 2026
Walking an AML alert queue without theatre
Practical notes from sitting beside financial crime analysts as they open, escalate, and close alerts in Taiwanese remittance and digital banking teams.
Policy documents describe how alerts should move. Queues show how they actually move. The gap between the two is where most AML walkthrough findings live.
Sit where the analyst sits
Ask to observe a live session—opening an alert, reading the narrative, deciding to escalate or close. Note how long it takes to find customer history and whether escalation requires a second person who is actually available that afternoon.
Ownership of dormant items
Every queue has items older than the stated SLA. Trace who owns them. If ownership resets every shift change, the queue will keep ageing no matter how polished the policy sounds.
Case-file discipline
A closed alert should leave a reader able to reconstruct the decision. Missing narratives, copy-paste justifications, and attachments that do not match the date of the alert are common findings—and easy to fix once named.
After the walkthrough
Teams that treat the walkthrough as theatre rearrange desks for the visit. Teams that want durable improvement keep their ordinary desks and ordinary queues. That is the room we prefer to enter.