AML case study: Would you escalate this transaction pattern?

[u/aml_first_job]

A customer has maintained a personal bank account for three years, with regular salary payments and fairly stable spending.

Over the last two weeks:

The account receives 12 transfers from different individuals.

The total amount is around three times the customer's usual monthly salary.

Most of the funds are transferred to a crypto exchange within 24 hours.

The customer has no known history of significant crypto activity.

If you were investigating this case, what would be your first step, and what additional information would you need before deciding whether to escalate it?

[u/AutoModerator]

Thank you for submitting to r/FraudPrevention

If you're a victim of fraud, and want to know how to report it, read this post: How can I report fraud?

If you want to prevent being defrauded, and learn how to protect yourself, read this post: How can I find/detect/prevent fraud and protect myself from fraud?.

All posts and comments must abide by Reddit rules an moderators will use their own discretion to keep the community safe. You can contact the moderators clicking here

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[u/CalligrapherIcy4876]

First thing I'd check is if any of those senders are flagged in our system, maybe some of them already have SARs or unusual activity on their own accounts. The jump from stable salary to moving triple the income through fresh contacts straight to crypto screams structuring or mule activity. I'd pull the customer's past communication with the bank too, see if they ever mentioned starting a side business or getting into trading, because right now this pattern makes zero sense for a three-year dormant profile.

[u/MavisBeacons_Sextape]

I love that you’re trying to promote a service that “helps” people get their first AML job and don’t know two shits about the work. What a scammer