Which scenario most likely indicates potential active involvement of a customer in virtual asset related scam activities?

Direct sending to a scam cluster indicates active involvement by the customer in potentially

transferring funds associated with fraudulent activities. Sending funds directly to known scam

addresses is a strong indicator of complicity or direct engagement.

Indirect flows (A and B) could be less conclusive, and direct receiving (D) may indicate victimhood

rather than active involvement.

AML typologies and DFSA guidance identify direct outgoing transactions to scam clusters as

significant red flags.