CTA Rule Number + Risk Vector: [number] · [risk vector name]
Actions Taken: [pass / blocklist removed / blocklist added / ban / KYC / 3DS / bank statement/ allowlist for x time]
Investigation Insights:
1. [First finding: what was reviewed and what it showed]
2. [Second finding: key signal or pattern identified]
3. [Third finding: what determined the final decision]