Section 2 of 3

Customer Behaviour Red Flags

Beyond transactions — the behavioural warning signs that indicate a customer may be concealing illicit activity.

When Behaviour Speaks Louder Than Numbers

Transaction monitoring catches patterns in data. But some of the most important red flags are behavioural — visible only to the people who interact with customers directly. As a Barclays employee, you are a critical line of defence precisely because you can observe what no algorithm can: how a customer acts, reacts, and responds under scrutiny.

Handcuffs on banknotes representing financial crime consequences

Seven Behavioural Red Flags

Reluctance to Provide ID

A customer who is reluctant or unable to provide standard identification should be treated with heightened suspicion

Inconsistent Documentation

Documents that contain inconsistencies, appear altered, or do not match other information provided

Third-Party Funding

Funds from unrelated third parties with no explanation — as in the Stunt & Co case

Sudden Pattern Changes

A dramatic and unexplained change in transaction behaviour

Complex Ownership Structures

Multi-layered corporate structures with shell companies and nominee directors

Evasiveness About Source of Funds

A customer who is vague or provides inconsistent explanations about the origin of their wealth

Attempting to Rush Onboarding

Customers who pressure staff to expedite onboarding or bypass normal KYC checks

Dynamic Risk Assessment

As Flagright's analysis of the Barclays case emphasises, static risk assessments conducted only at onboarding fail to catch behavioural shifts. Dynamic, continuous monitoring is essential — and that includes human observation.

Gavel with folders representing regulatory enforcement

Decision Tree: New Customer Onboarding

You are a relationship manager onboarding a new business customer. Navigate through the scenario to reach the best outcome.

Step 1 of 5 — The Application

A new customer applies to open a business account for a property investment company. Their application lists a registered address in the UK but the director's passport shows a different country of residence.

Step 2 — You Proceeded Without Checking

You proceed. The customer deposits GBP 250,000 in the first week from an overseas account. What do you do?

Step 2 — Good: You Asked for Clarification

The customer explains they recently relocated. You verify this with utility bills. However, they become agitated when you ask about the source of their initial deposit. What do you do?

Step 3 — You Flagged the Deposit

Good — you flagged the deposit. Your manager asks you to investigate. The customer's company has three layers of holding companies registered in different jurisdictions. What do you do?

Step 3 — Outcome

Failure: Multiple Red Flags Missed

Over the next month, GBP 1.2 million passes through the account and is transferred to multiple overseas accounts. Your compliance team flags the activity. The account is frozen and a SAR is filed. You face a formal performance review.

Step 3 — Outcome

Onboarding Suspended

The customer deposits GBP 500,000 from an account in a high-risk jurisdiction. Without documented source of funds, your compliance team intervenes. The onboarding is suspended. Your manager notes you accepted vague answers without documentation.

Step 3 — Evidence Provided

The customer provides bank statements showing proceeds from three UK property sales. The amounts match. You document everything and proceed with appropriate CDD.

Well done. You identified the evasiveness, required evidence, and documented your findings before proceeding.
Step 4 — Final Outcome

Well Done: Correct Outcome

You complete onboarding with full documentation. Ongoing monitoring is set at "enhanced" due to the initial red flags. The customer's first quarter of activity is consistent with their stated business.

You identified red flags, documented your decisions, and applied proportionate controls.

Step 4 — Outcome

Risky: Failure to Escalate

The customer provides a plausible but unverifiable explanation. You document it but do not escalate. Six months later, the account is linked to a fraud investigation. Your failure to escalate to the MLRO when you had concerns may result in disciplinary action.

Decision tree completed — next section unlocked!
Previous: Transaction Red Flags Next: Case Studies