A red flag is an unusual transaction, activity, or customer behaviour that appears inconsistent with the customer's known profile or expected business activity. While a red flag does not confirm suspicious or illegal activity, it indicates a higher risk and requires further review to determine whether the activity is legitimate or potentially suspicious.