Yes, something about her profile has tripped the bank's anti-fraud or anti-AML filters. Not worth worrying about other than assuring that it's not a fraud. I presume that she provided the data underlying the request in her application.
Before responding, I would call the customer service number (look it up, do not call the number on the email/letter she received) and assure that the request is not itself a fraud.