Red flags don't mean much. Building AML models is hard, and often yield an overwhelming number of false positives that arise from an over-reliance on those indicators. Sure, a positive prediction might lead to a SAR, but unfortunately that doesn't mean much either. In the majority of cases it will lead to the customer being off-boarded, in which case they'll simply go to another bank with more lacklustre controls. A SAR won't lead to a prosecution unless it sparks a new case in law enforcement (rare due to resource constraints), or whether it supports part of an ongoing case.

Sadly, that money will probably be laundered.