See every connection behind an alert
Link Analysis finds, understands and visualises the relationships between any entities connected to an alert. It traces the transactions, accounts and clients behind it, and the people and companies behind them, and draws them as one network, with each link labelled for what it is. A map shows where the network reaches, and every linked alert and comment sits in one place. One suspicious payment becomes a network your investigators can follow and save to the case.
What one alert misses
An alert shows one customer. The risk is often in who they are connected to.
Link Analysis finds the chains of linked transactions, accounts and clients behind an alert, and shows them as one graph: people, companies and other alerts, with every link labelled.
Illustrative exampleInvented Names & Data
e.martiInside a link analysis case
Click through a case the way an investigator does.
A saved case opens in four tabs, and anyone on the team can pick it up where it was left. Start in the graph, click any object, then follow it onto the map, into the full details, and through every comment left on it.
e.martie.martie.martiAlert 2
| ID | Category | Created | Status |
|---|---|---|---|
| AL-ONLINE-00312745 | Transaction monitoring | 12.10.2026 | Open |
| AL-BATCH-00099310 | Transaction monitoring | 03.09.2026 | Assigned |
Investigation 1
| ID | Workflow | Created | Status |
|---|---|---|---|
| INV-ONLINE-00000031 | Default | 13.10.2026 | In process |
List entry 2
| ID | Name | List | Category |
|---|---|---|---|
| 90210004411 | Lukas Vogel | Global PEP list | PEP |
| WL_00000041 | Nordwind Trading AG | White List | – |
e.marti| Date | User | Object | Comment |
|---|---|---|---|
| 13.10.2026 09:12 | e.marti | AL-ONLINE-00312745 | Payments to Rheintal Logistics SA reviewed. Opened link analysis case. |
| 13.10.2026 10:40 | j.feldmann | AL-BATCH-00099310 | Payment partner of the online alert. Investigation started. |
| 14.10.2026 08:05 | e.marti | INV-ONLINE-00000031 | Rheintal’s nominal director, Lukas Vogel, matches a PEP list entry. Escalated. |
Example case, names, alerts, comments and dates. The map is stylised.
One graph, many kinds of investigation
Wherever things connect, the same graph shows how.
People, organisations, assets and transactions are all in scope, so the same tool serves more than one team. Each case below is invisible one record at a time, and obvious on the graph.
Money laundering
Three accounts, and money moving between them in sequence. Seen one at a time, each account looks ordinary.
One owner behind all three accountsSee Transaction MonitoringInsurance fraud
Three claims from three different claimants. Checked one by one, nothing stands out.
Every claim gives the same addressSee InsuranceSanctions exposure in assets
A vessel and a fund, each clean on its own, owned through the same holding company.
Its director is on a sanctions listSee Asset ScreeningIncident management
Three incident reports from different sites, filed weeks apart.
All three trace back to one partSee Non-Financial Service IndustriesStart from any alert
The investigation starts where the analyst already is.
Link analysis is a tab on the alert itself. Open the alert, open its linked objects, and the chain behind it is already drawn.
People2
Companies2
Alerts1
List entries2
1Rheintal Logistics SA→2its own open alert·3Lukas Vogel, beneficial owner→4a PEP list entry
Example alerts, names and list entries.
What it draws on
The financial data, and everything already on file about it.
Link Analysis finds the chains of linked transactions, accounts and clients, then connects them to what DetectX® already holds: alerts, investigations, queries and list entries. Each object becomes a point on the graph, and each connection a labelled link.
Example case, names, alerts and account numbers.
Explore the DetectX® Platform
Rules work with every capability.
The Link Analysis decides what happens. The other capabilities give it more to decide on. Pick one to see what it does.
Link Analysis FAQs
What compliance teams usually ask before they choose Link Analysis.
No. It's part of the DetectX® platform and opens as a tab on any alert. It uses the same alerts, investigations and lists as the rest of DetectX®, so there's no second system to load data into.
People, organisations, items such as products, policies, stocks, vessels and assets, and transactions such as payments and claims. Every link is labelled for what it is: a payment, a CEO, a nominal director, a list entry.
The connections between accounts flagged for suspicious transactions. Drawn as one network, patterns such as rapid transfers between accounts with a common owner become visible, so the case can be investigated and reported in time.
Yes. A link analysis case keeps the graph, a map of where the linked objects are, the full details of every object and every comment left on them. Anyone on the team can open it where it was left, and the graph can be saved as an image for the file.
Yes. Insurance fraud, sanctions exposure in assets and incident management are covered above, under One graph, many kinds of investigation.
Go Deeper
All resourcesWhere the alerts behind a case are raised: each client's activity checked against your rules, with every alert traced to its source.
See Transaction MonitoringSolutionAsset ScreeningVessels, funds and holdings screened like a client, then traced back through owners and directors to the people behind them.
See Asset ScreeningSee Link Analysis in a demo
Book a working session on your own entity data. Bring your questions about which sources feed the graph and what an analyst can act on from it.