Why is this suspicious? What specific indicators made the analyst conclude suspicion rather than explain the activity away? Reference to FATF typologies or FinCEN guidance is helpful.