What creates a case
Every alert that arrives ends up on a case. Whether it opens a new one depends on what the alert is about.
An alert arrives, from a vendor or from your own systems. Cogentic works out what it is about, then does one of two things.
| If | Then |
|---|---|
| An open case already covers the same subject | The alert joins that case |
| No open case covers it | A new case opens, and the investigation starts |
Transfer flow
Kestrel Digital · AU to SG
412,500
Inbound
398,100
Outbound
Top counterparties
The subject is the address, transfer, person or company the alert is about. Two alerts about the same wallet land on one case. Two alerts about different wallets get a case each, even if the same customer holds both.
Closing a case does not stop the next alert
An alert only joins a case that is still open. Close a case, and the next alert about the same subject opens a fresh one rather than reviving it. A case you closed records a decision. Later activity gets a case of its own.
Opening a case yourself
You do not have to wait for an alert. Starting an investigation from a wallet or a transfer opens a case the same way. The difference is ownership: a case you opened records you as its owner from the start, while one Cogentic opened arrives unassigned.
Related
Connecting a vendor
An investigation calls the vendors you have connected and no others.
How customers connect to cases
A case shows a customer's name beside an address only when that customer has declared the address. Screening works either way.
What KYT is
Know your transaction screens onchain activity against categories of concern. It tells you about the money an address has touched, and nothing at all about the person holding it.
Last checked against the product on .