well, if the CEO has made this request previously and the scammers were already monitoring her calls/video calls etc, then yes, it probably would not raise an immediate red flag because it is a know a validated repeat request from the CEO which usually is within the SOP and approved.