A long-term client of an insurance company makes changes to a policy that require payment...

A long-term client of an insurance company makes changes to a policy that require payment of an additional lump sum. The amount payable is high, though within the client's means based on the KYC information collected. The payment is made via a company in another jurisdiction that is known to have lax AML controls.

Which indicator of suspicious activity is present?