Suspicious activity flags

A suspicious activity flag is an alert that identifies when the beginning and ending balances of a statement period do not reconcile with the total value of the transactions captured within that period.

These flags are presented in the primary_recon_error_reason and secondary_recon_error_reason inside each period object.

Each suspicious activity flag provides a primary reason for the alert, along with an optional secondary reason that helps to contextualize the alert.

Primary reason	Secondary reason	Description
Incomplete information	Incomplete transaction data	This indicates that some of the transaction information is not available, for example, because the statement has been redacted or quality is illegible.
	Incomplete statement period data	This indicates that part(s) of the statement summary information is not available, for example, because the statement has been redacted or quality is illegible.
	Missing pages	This indicates that pages within the uploaded statements are missing.
Potential fraud	Invalid date(s)	This indicates that there are dates occurring in the past/future or dates that do not exist.
	Invalid amount or balance	Examples of this include instances where a comma is misplaced, or there is a discrepancy between the balances and sum of the transactions amounts.
	Photoshopped data	This indicates photoshopped formatting or text that is detectable by the human eye.
Unreconciled period	Reconciliation error reason is not identified	This indicates that a reasonable amount of time was spent trying to rectify a reconciliation error, but the error was not identified.
Potential duplicate	-	This indicates that the calculated ending balance is twice that of the printed balance OR statement has most likely been uploaded to the book twice
File tampering detected	Page number(s)	This indicates where FTD has indicated that a PDF has digital edits or alterations not made by the banking institution. Note there are no false positives with FTD.