Spotting Suspicious Activity: Red Flags in the AML/CFT Onboarding Process