Investigating the transfers should be pretty easy if they are indeed wires (vs. ACH transfers). No bank is going to let $500,000 wires go through without additional authorization. Possibly a phone authenticator, but probably even a recorded phone call to/from the bank to the account owner to verify.