Agreed the setup could be for legitimate purposes or for a more suspect reason. But the starting point should always be to try to find out what the client is trying to achieve.
I've helped a number of mid sized businesses setup backend operations for their accounts payable, accounts...