Given a scenario where a customer's transaction volume suddenly spikes without a clear business purpose, what steps would you take to investigate?