SELECT '2022' AS year, monthNo, 'FULL' as kyc, Z.risk_catg, 'Custom' as Frequency, COUNT(DISTINCT IF(Z.gap <= Z.limit, Z.txn_id, NULL)) AS breaches , 'WalletWithdrawalTxnAfterAddingBank' as rule FROM (SELECT month(A.txnTime) AS monthNo, A.senderuserid, A.txn_id, B.account_bank_sha, ((UNIX_TIMESTAMP(A.txnTime) - UNIX_TIMESTAMP(B.created))/3600) as gap, IF(C.hml_category IS NOT NULL, C.hml_category, 'LOW RISK') AS risk_catg, CASE WHEN C.hml_category = 'HIGH RISK' THEN 24 WHEN C.hml_category = 'MEDIUM RISK' THEN 12 ELSE 4 END AS limit FROM (SELECT DISTINCT senderuserid, transaction_id as txn_id, transaction_time as txnTime FROM fraud.transaction_details_v3 WHERE year(updated_date) = 2022 AND backend_errorcode = 'SUCCESS' AND errorcode = 'SUCCESS' AND pay_transaction_status = 'COMPLETED' AND workflowtype = 'WALLET_WITHDRAWAL' AND transfermode = 'ACCOUNT_WITHDRAWAL_CLOSURE' AND wallet_flag = true)A INNER JOIN (SELECT DISTINCT user_id, created, account_bank_sha FROM payment.accounts WHERE year = 2022)B ON A.senderuserid = B.user_id AND ((UNIX_TIMESTAMP(A.txnTime) - UNIX_TIMESTAMP(B.created))/3600) BETWEEN 0 AND 24 LEFT JOIN (SELECT DISTINCT senderuserid, hml_category FROM fraud.hml_classification)C ON A.senderuserid = C.senderuserid INNER JOIN (SELECT DISTINCT user_ext_id FROM users.users WHERE kyc NOT IN ('MIN_KYC', 'MIN_KYC_V2'))D ON A.senderuserid = D.user_ext_id)Z GROUP BY Z.risk_catg, Z.monthNo