Investigation Agent

Purpose

Investigation Agent gathers KYC, transaction, case management, and adverse media evidence to support AML investigation work. Its purpose is to organize investigation findings by category so compliance analysts can review relevant evidence from client records, transaction data, public sources, and related case information.

Primary users

The primary users are external client AML compliance analysts. These users review investigation evidence connected to alerts, red flags, customer profiles, transactions, counterparties, external intelligence, document availability, and data quality observations.

Where it fits (process/stage/trigger)

Investigation Agent fits after alert prioritization and extraction steps. It is triggered by priority level, red flags identified, focus areas from Alert Scorer, and original extracted data from Alert Extractor, then supports the investigation stage by gathering and organizing relevant evidence.

Key capabilities / workflow

Investigation Agent analyzes alert context, queries available KYC and transaction records, reviews case management records, and searches web or OSINT sources for adverse media and public records. It validates whether evidence is complete, loops back to collect additional information when needed, checks for data quality issues, and generates structured investigation findings.

Inputs

Typical inputs are priority level, red flags identified, focus areas from Alert Scorer, and original extracted data from Alert Extractor. The agent uses client KYC records, transaction history database content, case management records, and web or OSINT sources such as adverse media and public records.

Outputs / Deliverables

The outputs are investigation findings organized by category. The categories are Customer Profile, Transaction Analysis, Counterparty Assessment, External Intelligence, Document Inventory, and Data Quality Notes.

Value

Investigation Agent helps AML compliance analysts structure investigation evidence consistently across customer, transaction, counterparty, external intelligence, document, and data quality dimensions. It reduces manual effort in gathering and organizing relevant information while keeping the investigation focused on the identified red flags and priority areas.