The Real Warning Sign Was Not One Transaction. It Was the Pattern

Core topic: Why the connections between accounts, transactions and business activity can reveal financial crime that individual reviews may miss.

Money laundering does not always begin with a complicated international structure or an obviously suspicious payment.

Sometimes, it begins with an ordinary-looking bank account, a registered business and a series of transactions that appear reasonable when viewed separately.

The challenge for compliance professionals is recognising when these individual pieces form a much larger picture.

A real case: Millions moved through business accounts

On 18 November 2025, the U.S. Department of Justice announced the sentencing of Cynthia Song to 121 months in prison for her role in an international money laundering conspiracy.

According to the DOJ, Song pleaded guilty to conspiring to launder more than $11.6 million in proceeds from fraud schemes that targeted approximately 180 victims. The schemes included impersonation and technical support scams in which victims were deceived into sending money to accounts controlled by Song and her co-conspirators.

The DOJ reported that the network used dozens of business bank accounts to receive and transfer fraudulent funds. In one example, at least $170,850 from multiple victims entered an account controlled by Song under the name of a real estate development business. Nearly all of those funds were withdrawn and transferred abroad within days.

The case demonstrates how business accounts and apparently ordinary financial activity can be used to move the proceeds of fraud.

Importantly, the concern was not simply that money entered a business account. It was how the accounts were used, how quickly funds moved and how the activity connected to the underlying fraud.

Why individual transactions may not tell the whole story

Imagine a business receiving several payments from different individuals. Each payment has a reference, and the account holder provides a business explanation.

A transaction reviewed in isolation may not raise an immediate concern.

However, a broader review might reveal that the payments arrive from unrelated individuals, are quickly transferred to other accounts, and have little connection to the business's stated activities.

This is where the pattern becomes more informative than any single transaction.

Rapid movement of funds is not automatically suspicious. Businesses regularly make urgent payments, and some operate with high transaction volumes. The relevant question is whether the activity makes sense in the context of the customer's business, expected behaviour and available supporting information.

What compliance teams can learn

There are several practical lessons from this case.

1. Look beyond transaction values.

A relatively small payment can be part of a much larger scheme. Reviewing transaction relationships, frequency, counterparties and subsequent movements may reveal risks that value-based thresholds alone do not capture.

2. Understand the business purpose.

Does the account activity match the customer's stated operations? A business receiving payments from numerous unrelated individuals and rapidly transferring the funds may warrant further review if that behaviour has no credible commercial explanation.

3. Connect related information.

Where information is available, reviewing linked accounts, counterparties, payment instructions and recurring patterns can help investigators identify relationships between transactions that initially appear unrelated.

4. Reassess the customer when behaviour changes.

A customer may have been onboarded appropriately but later begin using the account in an unexpected way. Ongoing monitoring helps organisations assess whether new activity remains consistent with the customer's known profile.

5. Document decisions fairly.

An unusual pattern is a reason to investigate, not proof of criminal activity. Compliance teams should consider legitimate explanations, obtain additional information where appropriate and record the reasoning behind their decisions.

The wider lesson

Financial crime controls are most effective when they combine reliable customer information with an understanding of how money actually moves.

A business registration, an invoice or a valid account opening does not independently explain every subsequent transaction. Equally, an unusual transaction does not automatically establish wrongdoing.

The objective is to understand the complete financial picture and act on credible concerns proportionately.

The most important warning sign may not be a single payment. It may be the story that emerges when all the payments are viewed together.

Reference

Source: U.S. Department of Justice, U.S. Attorney's Office for the Central District of California.

Publication date: 18 November 2025.

Official case announcement: Arcadia Woman Sentenced to More Than 10 Years in Prison for Role in $11.6 Million Money Laundering Racket that Conned Elderly Victims