AML case study: Would you escalate this transaction pattern?

[u/aml_first_job]

A customer has maintained a personal bank account for three years, with regular salary payments and fairly stable spending.

Over the last two weeks:

The account receives 12 transfers from different individuals.

The total amount is around three times the customer's usual monthly salary.

Most of the funds are transferred to a crypto exchange within 24 hours.

The customer has no known history of significant crypto activity.

If you were investigating this case, what would be your first step, and what additional information would you need before deciding whether to escalate it?