<!-- Source: https://blnkfinance.com/tools/watch -->

Blnk Watch

# Write rules to monitor and flagunusual transactions in your ledger.

Write anomaly-detection rules as scripts, version them in Git, and catch suspicious transactions the moment they hit your ledger.

[Explore docs](https://docs.blnkfinance.com/watch/quick-start) [Create account](https://cloud.blnkfinance.com/auth/sign-up)

High value transactionsRapid spendingHigh value cross-borderPrevious failedLow KYC high risk

```
rule HighValueTransactionCheck {  description "Monitors for unusually large transactions requiring review."   when amount > 10000   and currency == "USD"   then review       score   0.5       reason  "Transaction amount exceeds 10,000 USD"}
```

### TITLE

### Transaction amount exceeds 10,000 USD

Flagged

### DESCRIPTION

### Risk

low

### Risk score

0.5

### Verdict

review

### Assignee

\-

### Date Created

Aug 20, 2026, 12:48 PM

### Alert ID

## Set up 24/7 transaction monitoring.Never miss an alert or anomaly inyour ledger

monitoring-rules

-   HighValueTransactionCheck.ws
-   HighAmountVelocitySource.ws
-   CrossBorderTransactionCheck.ws
-   BlockIfPreviousFailed.ws
-   LowKycHighRisk.ws
-   HighValueUSD.ws
-   HighValueTransfer.ws
-   LargeTransfer.ws
-   LateNightLargeTransfer.ws
-   LateNightTransactions.ws
-   WeekendTransactionCheck.ws
-   WeekendHighValueTransactions.ws
-   UnusualTransactionTime.ws
-   RapidSmallBurst.ws
-   BurstToSameDestination.ws
-   RepeatedIdenticalAmount.ws
-   RepeatedTransactions.ws
-   SelfTransferCheck.ws
-   SameSourceAndDestination.ws
-   SourceHighOutflow.ws
-   DestinationHighInflow.ws
-   HighFrequencyDestination.ws
-   MaxAmountSource.ws
-   MinAmountDestination.ws
-   AverageAmountSource.ws
-   DormantAccountActivity.ws
-   NewAccountFirstDay.ws
-   LowKycDailyLimit.ws
-   LowKycDailyTotal.ws
-   SanctionedCountryCheck.ws
-   HighRiskDestinationCountry.ws
-   ForeignCurrencyTx.ws
-   MismatchedCountries.ws
-   KnownFraudEntityCheck.ws
-   BlockBlackListedAccounts.ws
-   SuspiciousMCCCheck.ws
-   SuspiciousDescriptionCheck.ws
-   SuspiciousKeywordTransfer.ws
-   CategoryBTCCheck.ws
-   RedeemDiscountCode.ws

HighValueTransactionCheck.ws

```
rule HighValueTransactionCheck {  description "Monitors for unusually large transactions requiring review."   when amount > 10000   and currency == "USD"   then review       score   0.5       reason  "Transaction amount exceeds 10,000 USD"}
```

### Watch scripts

Create, edit, and manage monitoring rules by publishing them as scripts in WatchScript, our dedicated DSL.

### Defined verdicts

Watch returns a verdict for each flagged transaction based on your rules, so your app can hold, flag, or refuse it.

### Versioned in Git

Compile and sync rules from a remote Git repository. Update rules the same way you change code, without touching core product logic.

## Seamlessly integrate Watch with Blnk or use with your existing in-house ledger

BF

Blnk Finance

GENERAL

Home

Insights

BACK OFFICE

Ledgers

Balances

Transactions

Identities

Reconciliations

MONITORING

Alerts

Apps library

What's new?

Need help?

Search⌘K

blnk-production

New

Alerts

All

14

Investigating

Flagged

Resolved

Add filtersRefresh

| Title | Status | Assigned to | Created at |  |
| --- | --- | --- | --- | --- |
| High-value USD transfer exceeds 10,000 | Flagged | Claire Hart | Aug 20, 2026, 2:48 PM |  |
| Rapid spending from a single source | Investigating | Helen Cole | Aug 20, 2026, 2:31 PM |  |
| Low-KYC account on a high-risk merchant | Investigating | Noah Williams | Aug 20, 2026, 1:56 PM |  |
| Cross-border transfer above review threshold | Resolved | Priya Shah | Aug 20, 2026, 1:22 PM |  |
| Previous failed payout blocked | Resolved | Lucas Berg | Aug 20, 2026, 12:48 PM |  |
| Late-night large transfer | Resolved | Maya Chen | Aug 20, 2026, 12:11 PM |  |
| Repeated identical amount burst | Resolved | Claire Hart | Aug 20, 2026, 11:37 AM |  |
| Sanctioned destination country | Resolved | Helen Cole | Aug 20, 2026, 11:04 AM |  |
| Self-transfer between own balances | Resolved | Noah Williams | Aug 20, 2026, 10:29 AM |  |
| Dormant account sudden activity | Resolved | Priya Shah | Aug 20, 2026, 9:51 AM |  |
| Weekend high-value withdrawal | Resolved | Lucas Berg | Aug 20, 2026, 9:18 AM |  |
| Suspicious description keywords | Resolved | Maya Chen | Aug 20, 2026, 8:44 AM |  |
| New account first-day limit | Resolved | Claire Hart | Aug 20, 2026, 8:09 AM |  |
| Blacklisted source blocked | Resolved | Helen Cole | Aug 20, 2026, 7:33 AM |  |

Go back

# Deploy a managed instance

All fields marked \* are required

### Deploy Managed Core

We'll host your Core for you.

Deployment type\*

Sandbox

Production

Instance name\*

Region\*

New York City, United States

New York City, United States

London, United Kingdom

Amsterdam, the Netherlands

Singapore

Frankfurt, Germany

Toronto, Canada

Pricing summary

Production instance

$ 1,000.00

Infrastructure, backups, and high availability

Included usage

200,000 records

Additional usage

$0.000175 per additional record

Charged today

$ 1,000.00

Deploy instance

Clicking “Deploy instance” means you agree with our Service Level Agreement (SLA) and Terms of Use.

What's included

Production-grade infrastructure

Dedicated infrastructure with throughput of up to 100,000 TPM (transactions per minute).

High availability

99.9% uptime SLA with automated failover and backups.

Guided migration and deployment

Hands-on support for safely migrating existing ledger data and workloads.

Built-in Data Lake

Access long-term ledger data for audits, reporting, and operational insights.

Dedicated support

Dedicated Slack support channel

24/7 support with 1-hour SEV 1 response for your deployment issues

## Confirm deployment

You are about to deploy your Production instance in  

New York City, United States. Takes about 10–30 minutes to complete.

Charged today$ 1,000.00

Your subscription starts immediately. Future invoices will include the $ 1,000.00 USD monthly subscription plus any additional usage.

CancelConfirm and deploy

Go back

# Alert details

#### Name

Stripe payout failed for FundingPool

#### Status

Flagged

#### Description

\-

#### Assigned To

Claire Hart

#### Date

Aug 16, 2026, 2:08 PM

#### Quick Actions

View full detailsCopy alert ID

### Sync with your Blnk Core DB

Watch reads new posts from the Core transactions table as they land. No extra webhook plumbing.

### REST APIs

Inject transactions over HTTP from Blnk Core or from an in-house ledger you already run.

### Alert webhooks

Get a webhook when a rule fires so your app can hold, flag, or refuse the post.

### Manage alerts on Cloud

Assign, investigate, and resolve flagged transactions in the Cloud back office.

## FAQs

Have other questions? Email us at [support@blnkfinance.com](mailto:support@blnkfinance.com).

What is Blnk Watch?

Watch is a rule-based transaction monitoring engine. You write rules in WatchScript, send transactions in, and get a verdict so your app can hold, flag, or refuse the post.

Do I need Blnk Core to use Watch?

No. Connect Watch to Blnk Core, or inject transactions over HTTP from a ledger you already run. The [integration guide](https://docs.blnkfinance.com/watch/integration) covers both.

How does Watch connect to Blnk Core?

The usual path is to [connect your Blnk Core database](https://docs.blnkfinance.com/watch/integration) and Watch listens for new posts to the transactions table as they land. Alternatively, you can push transactions through the REST API or a Core webhook.

What verdicts can Watch return?

Each rule can return allow, approve, alert, review, deny, or block. Watch consolidates matching rules into one score and one final verdict your app can act on based on what you've defined.

Does Watch hold or refuse the transaction for me?

No. Watch returns the verdict. Your app decides whether to hold, flag, or refuse the post. [Alert webhooks](https://docs.blnkfinance.com/watch/webhooks) can notify you when a rule fires.

How do I update rules without changing product code?

Write WatchScript files and sync them from a Git repository. Make an update the same way you'll edit a Google Docs file. Watch automatically listens for updates and reloads the new rule into the monitoring engine.

Where do investigators review alerts?

If connected to Blnk Cloud, flagged activity can appear in Blnk Cloud. [Create a Cloud account](https://cloud.blnkfinance.com/auth/sign-up) to set up your back office and review alerts with your team.

Is Watch available now?

Yes (currently in beta). You can start from the [quick start](https://docs.blnkfinance.com/watch/quick-start) and message support@blnkfinance.com if you need help setting up monitoring for your product.

How do I get started?

[Sign up to Blnk Cloud](https://cloud.blnkfinance.com/auth/sign-up) , deploy a Sandbox, and enable Watch for your instance. Follow the quick start to write a rule, and send a transaction. You should see it flagged as an alert in your workspace. [Contact sales](https://blnkfinance.com/contact/us) if you'd like to see a demo.
