Skip to main content
When transactions are flagged by rules, Didit creates alerts that can be organized into cases for structured investigation. Cases group related transactions, track investigation progress, and maintain an audit trail.
Cases created from transaction rules use the same Case Management module as every other case in the console, one lifecycle, one API, whether a case started from a rule, an AML hit, a workflow, or a manual click. This page covers the transaction-monitoring-specific pieces: alerts and the Create case rule effect. For the full case lifecycle, blueprints, checklist, 4-eyes review, and FIU reporting, see Case Management.

​
Alerts

Every time a rule matches a transaction, an alert is created. Alerts can also be created manually by analysts or by external providers.

​
Alert sources

​
Alert statuses

​
Opening a case from a rule

Add the Create case effect to a transaction rule to open cases automatically whenever it matches:
  • Blueprint the case routes to (assignment, escalation, 4-eyes, and case-page content all come from the blueprint, see Blueprints)
  • Grouping: By applicant reuses the subject’s open case across every rule; By rule and applicant opens one case per rule per applicant
  • Attach matched transaction, to link the triggering transaction to the case automatically
Cases created this way carry source TRANSACTION_RULE and are anchored to the transaction’s subject (a user or a business), the same one-subject-per-case rule every case follows. You can also open a case manually from any transaction with Add to case, either attaching it to an existing open case for the same subject or creating a new one. See Creating cases for every entry point.

​
Case lifecycle and resolution

Cases move through Open, Awaiting user, and Resolved, closing with resolution False positive or Valid threat. See Cases for the full lifecycle, and FIU Reports & Templates to generate a SAR, STR, CTR, or other filing from a resolved investigation.

​
API

Cases opened from transaction rules are fully manageable through the Management API, list, create, resolve, attach transactions as links, and pull case analytics for your own dashboards.

​
Next steps

Alerts

Alert lifecycle, sources, and SAR workflow.

Case Management

Full lifecycle, lists, blueprints, and 4-eyes review.

FIU Reports

Templates, report types, and printable filings.