WHO
The subject of this report is Samir Wang (client reference cust_0013), an individual described at onboarding as Civil engineer.Evidence: customer:cust_0013
WHAT
Between 2026-09-21T09:00:00Z and 2026-09-22T06:29:00Z, the reporting entity recorded 2 incoming virtual-currency transfer(s) for this customer with a combined CAD-equivalent value of 8,600.00.Evidence: tx_000236, tx_hop_237, tx_000239, tx_000112
The receipts originated from 2 distinct sending addresses.Evidence: 0xffed60a4cde1474791aa6b2b8ff2895c1eed3f6b, 40c23a9a104075bd4101dec1222a7d9756d
The activity involved 2 virtual currencies (ETH, XMR).Evidence: tx_000236, tx_hop_237, tx_000239, tx_000112
HOW FUNDS MOVED
2 outgoing transfer(s) totalling 16,300.00 were recorded over the same period to 2 address(es).Evidence: tx_000236, tx_hop_237
2026-09-21 09:00 - sent 2.35339259 ETH (CAD 8,200.00), reference tx_000236.Evidence: tx_000236
2026-09-21 12:00 - sent 2.2593029 ETH (CAD 8,100.00), reference tx_hop_237.Evidence: tx_hop_237
2026-09-21 16:00 - received 2.22099596 ETH (CAD 7,950.00), reference tx_000239.Evidence: tx_000239
2026-09-22 06:29 - received 2.73250345 XMR (CAD 650.00), reference tx_000112.Evidence: tx_000112
WHY SUSPICIOUS
Value left the customer and returned after 3 hop(s): CAD 8,200.00 out, CAD 7,950.00 back. (indicator AML-VC-011 v1.0).Evidence: txn:155, txn:158, txn:162
CAD 7,950.00 received in 24 hours against an active-day average of CAD 750.00 over 5 active day(s) in 90 days (10.6x); the customer's previous busiest day was CAD 2,200.00. (indicator AML-VC-004 v2.0).Evidence: txn:162
Address 0xe85e2cabeb10a7ca450f3499c247a707e3a37235 transacted with 2 different customers in the last 30 days, which can indicate an undisclosed third party. (indicator AML-VC-007 v1.0).Evidence: txn:155, txn:158
100% of the value received in 24h came from 1 address(es) first observed within the last 7 days. (indicator AML-VC-014 v1.0).Evidence: txn:162
The customer's declared expected monthly activity at onboarding was CAD 15,000.00.Evidence: customer:cust_0013
The transactions above are reported because they are inconsistent with the customer's established activity as recorded by the reporting entity. No determination has been made as to the origin or purpose of the funds.Evidence: tx_000236, tx_hop_237, tx_000239, tx_000112