The main objective when a financial institution (FI) conducts an investigation is to track the movement of the money. Money laundering is a process of disguising the proceeds of criminal activity to make them appear legitimate. The movement of money is an essential element in the process of money laundering. Therefore, tracking the movement of funds is a crucial step in identifying and preventing money laundering. A financial institution must be able to recognize suspicious transactions and report them to the relevant authorities. An investigation is conducted to gather evidence and establish a clear understanding of the transaction flow, the parties involved, and the nature of the activity. This information is used to determine if the transaction is suspicious and if it violates any laws or regulations.
While keeping policies and procedures updated, keeping documentation, and knowing the customer are essential components of a comprehensive anti-money laundering (AML) program, these activities are not the primary objective of an investigation. Policies and procedures need to be updated to reflect changes in regulatory requirements and emerging money laundering risks. Documentation must be retained to provide evidence of the investigation process and outcomes. Knowing the customer is essential to identify and verify the customer's identity and assess the risk associated with the relationship.
References:
* ACAMS Study Guide for the CAMS Certification Examination - 6th Edition, Chapter 3: AML Programs, Section 3.2: AML Program Components, Subsection 3.2.4: Transaction Monitoring and Investigation, pp. 87-88
* Main Objective of Conducting Investigations - exam-answer.com

This is a red flag of money laundering or terrorist financing that involves the use of non-profit organizations (NPOs) as conduits for illicit funds. NPOs may be vulnerable to abuse by criminals who exploit their legitimate activities, reputation, and access to funds and resources. A transaction monitoring process that would alert a bank for this red flag activity is to analyze the source, destination, frequency, and purpose of the funds transferred to and from the charity account, and to compare them with the expected profile and activity of the NPO. If the bank detects any inconsistency, discrepancy, or deviation from the norm, it should raise an alert and conduct further investigation.
References:
* FATF Report: Risk of Terrorist Abuse in Non-Profit Organisations, page 9
* Transaction Monitoring Processes for Red Flag Activity in Banking
* AML Red Flags - What are the Top 10 Indicators? - ComplyAdvantage, section "Red flags related to the nature of transactions"