If they sell firearms I would ensure they have the proper federal and state licenses in place. Beyond that, aside from possibly being cash intensive or having import/export activity I am not sure I would default the customer to the high risk list. Are they a really large operation?