I would think since every transaction is recorded on the blockchain, and he is the only one with the keys, any activity involving those BTC would raise a red flag.
But suppose that some time from now someone moves all that BTC into a different cryptocurrency, potentially via automated services like shapeshift.