Which item is explicitly listed as a red flag for detecting unusual activity?

Which item is explicitly listed as a red flag for detecting unusual activity?

• A. Unusual IP addresses
• B. Consistent login locations
• C. Stable account balance
• D. Uniform transaction notes

Answer: (A)

Unusual IP addresses are a red flag because they point to access from a location or device that doesn’t match the user’s normal pattern. When someone logs in from an unfamiliar or high‑risk IP, it suggests possible credential compromise, use of a VPN or proxy, or other unusual activity that warrants investigation. This kind of geolocation or device anomaly is a classic trigger for alerts in AML monitoring because it directly signals potential unauthorized access or atypical behavior. In contrast, consistent login locations indicate predictable access patterns, which are less suspicious unless paired with other indicators. A stable account balance simply shows no sudden change in funds, which isn’t itself an unusual activity signal. Uniform transaction notes aren’t a standard red flag for unusual activity and don’t by themselves indicate risk; they don’t demonstrate anomalous access or money movement.

Unusual IP addresses are a red flag because they point to access from a location or device that doesn’t match the user’s normal pattern. When someone logs in from an unfamiliar or high‑risk IP, it suggests possible credential compromise, use of a VPN or proxy, or other unusual activity that warrants investigation. This kind of geolocation or device anomaly is a classic trigger for alerts in AML monitoring because it directly signals potential unauthorized access or atypical behavior.

In contrast, consistent login locations indicate predictable access patterns, which are less suspicious unless paired with other indicators. A stable account balance simply shows no sudden change in funds, which isn’t itself an unusual activity signal. Uniform transaction notes aren’t a standard red flag for unusual activity and don’t by themselves indicate risk; they don’t demonstrate anomalous access or money movement.