CAMS Certified Anti-Money Laundering Specialist (CAMS7 the 7th edition) Questions and Answers

Customer onboarding is a critical AML/CFT process that must balance regulatory compliance with customer experience. Excessive friction can lead to customer dissatisfaction and abandonment.

Implementing internal or external tools —such as digital onboarding platforms, document collection tools, and workflow automation—can significantly streamline information gathering and reduce delays while maintaining compliance standards.

Additionally, consistent training of all employees involved in onboarding ensures that information requests are clear, consistent, and proportionate. Well-trained staff reduce rework, confusion, and unnecessary follow-ups, improving customer trust and efficiency.

Restricting decision-making to managers can slow processes, and delaying updates to processes reduces adaptability to evolving risks and regulatory expectations.

A risk-based approach prioritizes allocating more resources to higher-risk areas and regularly reassessing risks to ensure resource allocation remains aligned with evolving threats and vulnerabilities. This maximizes the effectiveness of the AFC program.

Corruption risks in the supply of goods and services often arise when contractors receive preferential treatment, enabling inflated margins, and when procurement processes lack sufficient oversight, making it easier for bribes or kickbacks to influence tender outcomes.

The AUSTRAC Fintel Alliance is a successful example of a public-private partnership (PPP). It brings together government agencies and private sector organizations to collaborate on detecting, preventing, and disrupting financial crime through shared intelligence, technology, and expertise.

The CAMS 6th Edition specifically lists environmental crime as a predicate offense for money laundering. Environmental crimes include activities such as illegal logging, illegal mining, and illegal trade in wildlife.

“Environmental crime, including illegal logging and mining, is recognized as a predicate offense to money laundering. Such crimes often involve complex corporate structures to hide the illicit origin of the proceeds.”

(CAMS 6th Edition, Chapter: Risks and Methods of Money Laundering and Terrorist Financing; FATF Recommendations, Predicate Offenses)

Incorrect Options:

A: Trade-based ML refers to manipulating trade transactions, not the underlying crime.

B: Corruption may be involved, but the primary crime is environmental.

C: Illicit resource trade describes the act, but the official predicate crime category is environmental crime.

Transaction monitoring governanceinvolves ensuring thatAML detection systems are effective, aligned with regulatory standards, and capable of identifying evolving threats.

Option B (Correct):Legal cooperation is essential for responding to subpoenas and law enforcement inquiries.

Option D (Correct):Regularly updating transaction monitoring scenarios ensures that the system adapts to emerging financial crime trends.

Why Other Options Are Incorrect:

Option A (Incorrect):SARs cannot be withdrawn unless an error was made—once filed, SARs remain confidential and must be retained.

Option C (Incorrect):Client profile updates are a CDD/KYC function, not directly related to transaction monitoring governance.

Best Practices for Transaction Monitoring Governance:

Regularly review system effectiveness through validation tests.

Collaborate with legal and compliance teams for risk mitigation.

Use AI and data analytics to refine detection accuracy.

Cross-border money laundering investigations frequently encounter obstacles arising from differences in legal systems, data protection laws, and investigative procedures. International AML/CFT guidance, including FATF recommendations, emphasizes the importance of formal legal cooperation mechanisms to overcome these challenges.

A Mutual Legal Assistance Treaty (MLAT) provides a structured and legally recognized framework for cooperation between jurisdictions. MLATs allow competent authorities to lawfully exchange information, obtain evidence, and coordinate investigative actions while respecting domestic legal requirements and data privacy obligations. This formal mechanism ensures that information shared is admissible and enforceable across jurisdictions.

Relying solely on informal communication channels is insufficient for complex investigations involving sensitive data and legal constraints. Engaging third-party consultants does not address legal barriers and may introduce confidentiality risks. Centralizing an investigation under a single jurisdiction would undermine sovereignty and is not consistent with international cooperation principles.

Therefore, establishing or utilizing an MLAT is the most effective and regulator-aligned approach to enhance cross-border cooperation in complex money laundering investigations.

One of the core components of a strong AFC (Anti-Financial Crimes) compliance program is establishingclear roles, responsibilities, and lines of accountability, especially forescalating and addressing AFC risks and compliance issues. This governance clarity ensures effective implementation, transparency in decision-making, and timely resolution of compliance concerns.

While external audits (option A) and internal controls (option B) are important,defining governance structure and escalation responsibilities (option D)is a foundational element. Additionally, the board of directors (option C) provides oversight—not day-to-day compliance monitoring.

Open-source tools offer cost-effective access to diverse data sources, making them valuable for financial crime investigations. They also support partial automation of data collection and analysis, reducing manual effort and improving efficiency in identifying suspicious patterns or links.

Residual risk represents the remaining level of risk after considering the effectiveness of controls . Under a risk-based approach, strong controls reduce risk, while weak or ineffective controls increase it.

In this scenario, the inherent risk is assessed as moderate , meaning the underlying exposure is neither low nor extreme. However, the controls are evaluated as less than satisfactory , indicating that existing measures are not adequately mitigating the identified risks.

When controls are weak, residual risk increases above the inherent risk level , as vulnerabilities remain unaddressed. Regulators expect financial institutions to escalate residual risk ratings and implement remediation plans in such cases.

Therefore, the most likely residual risk conclusion is high , reflecting the combination of moderate inherent risk and ineffective controls. This outcome aligns with AML best practice and regulatory expectations.

Criminals may target accountants because they have the capability to create and structure companies, falsify accounts, and manipulate financial statements, which can be exploited to disguise illicit funds and facilitate money laundering.

The US Department of the Treasury identifies money services businesses (MSBs) and non-profit organizations with international operations as high money laundering risks when they lose access to traditional financial institutions, as this can push them toward less regulated channels that are more vulnerable to abuse.

The pseudonymous nature of cryptoasset transactions enables criminals to transfer large sums globally while concealing their identities. This lack of transparency poses a significant money laundering risk, as it hinders efforts to trace the ultimate beneficial owner.

AI-powered dashboards summarizing flagged transactions are the most effective feature for improving investigator efficiency, as they consolidate and present relevant data from multiple sources in a structured, actionable format - reducing time spent on manual data gathering and enabling quicker decision-making.

Preventing financial crime is essential because it protects society by maintaining market integrity and public confidence, reducing the harm caused by illicit activities such as money laundering, fraud, and corruption.

This scenario describes the risk assessment element of an anti-financial crime (AFC) compliance program. FATF standards require organizations to regularly assess and reassess their money laundering and terrorist financing risks, particularly when there are material changes to business models, geographic exposure, or regulatory environments.

The MLRO’s review of the company’s expansion into high-risk jurisdictions and identification of vulnerabilities reflects a dynamic and forward-looking risk assessment process. Updating the compliance framework to address identified risks ensures that controls remain proportionate and effective.

Risk assessments form the foundation of the risk-based approach and directly inform decisions on enhanced due diligence, monitoring, governance, and resource allocation. This process is distinct from transaction monitoring, governance arrangements, or training activities, although those elements may be updated as a result of the risk assessment.

The United Nations Security Council (UNSC) is authorized under the UN Charter to imposebinding sanctions measureson member states. These sanctions may target countries, entities, or individuals and can include arms embargoes, travel bans, asset freezes, and restrictions on trade or financial services.

Statement Ais correct:

Circumventing or evading UNSC sanctionsmay constitute a criminal offenseif the jurisdiction has incorporated UN obligations into domestic law. While the UNSC does not directly impose criminal penalties,member states must implement these measures locally, andmany jurisdictions have lawsthat make such violations criminal acts.

Statement Bis incorrect:

The UNSC is empowered toimpose broad restrictions, includingtrade bans beyond arms, such as on luxury goods, fuel, or specific commodities. Therefore, the idea that it cannot prohibit exports beyond arms is inaccurate.

Statement Cis correct:

Member countries of the United Nations are expected to implement and enforce UNSC sanctions, in accordance with their obligations under the UN Charter (specifically Chapter VII). Countries are responsible for transposing these sanctions into their national legal frameworks.

Statement Dis incorrect:

Although member countries are required to enforce sanctions,not all countries automatically consider breaches a criminal offense. Whether a violation is criminal depends on how each country enacts UN sanctions domestically.

Policies, controls, and procedures must be proportionate to the size and nature of the firm, approved by senior management, and regularly reviewed to ensure they remain effective in preventing and mitigating financial crime risk while aligning with regulatory expectations.

Fuzzy matching is a critical technique used in name screening systems to identify potential matches where names are not spelled identically. Regulators recognize that sanctions, PEP, and watchlist screening must account for variations in spelling, transliteration, abbreviations, and phonetic differences.

Fuzzy matching algorithms compare names based on similar spelling patterns, phonetics, or character arrangements, allowing institutions to detect matches that exact matching would miss. This is especially important for names originating from different languages or alphabets.

Exact matching alone is insufficient for effective sanctions screening, as it would fail to capture common variations. While machine learning may enhance screening systems, fuzzy matching itself does not rely on predictive modeling.

Therefore, fuzzy matching improves detection effectiveness while supporting regulatory expectations for robust screening controls.

Regulatory reports—such as those published by FATF, FIUs, and supervisory authorities—provide valuable insights into emerging money laundering and terrorist financing risks.

A crucial step is systematically integrating identified risks into the institution’s internal risk assessment . This ensures that the organization’s understanding of threats remains current and aligned with regulatory expectations.

Another key action is building or enhancing transaction monitoring scenarios based on the typologies and red flags described in regulatory reports. This directly improves detection effectiveness and responsiveness to evolving threats.

While internal benchmarking and peer comparison may be useful, they are not substitutes for directly updating risk assessments and monitoring logic based on regulatory intelligence.

FATF standards require organizations to adopt a risk-based approach (RBA) that is informed by both internal risk factors and national and sectoral risk assessments . These assessments provide critical insight into prevalent money laundering and terrorist financing threats within specific jurisdictions and industries.

Organizations should integrate relevant findings from these assessments into their internal risk assessments to ensure that policies, controls, and monitoring systems are aligned with identified risks. This enables institutions to tailor enhanced due diligence (EDD) measures and allocate compliance resources effectively.

Ignoring national or sectoral assessments would weaken the organization’s ability to respond to known threats and would be inconsistent with regulatory expectations. These assessments are not limited to worst-case scenarios nor intended solely for regulators; they are a foundational input for private-sector AML programs.

The documentation should include evidence that the residual risk remains within the bank’s risk appetite, analysis of resources spent and costs associated with the current lower threshold, and historical data showing the high false positive rate to justify altering the threshold while maintaining effective risk management.

USA PATRIOT Act Section 314(b)allows financial institutions tovoluntarily share information with one another, after notifying the U.S. Treasury, toidentify and report possible money laundering or terrorist financing activities.

Key elements include:

Voluntary participation

Prior notice to FinCEN (part of the U.S. Treasury)

Protection from liability when acting in good faith

Enhanced collaborative detection across institutions

Section 314(a)refers toinformation sharing between law enforcement and financial institutions, not peer-to-peer sharing.

COSMICis an initiative in certain jurisdictions like Singapore, not U.S. regulation.

Regulation (EU) 2024/1624is part of the EU AML framework, not relevant to U.S. institutions.

Accounting can help detect irregular financial patterns, technology solutions and IT security provide systems for monitoring and data protection, and fraud risk management identifies and mitigates suspicious activities - all of which are essential to supporting AML and sanctions compliance programs.

The most effective way to reduce irrelevant results in AI/ML-driven adverse media screening is to fine-tune the models to prioritize high-risk keywords and reliable sources. This improves precision by filtering out noise and directing focus toward content that is more likely to indicate financial crime risk.

Independent testing is critical for the third line of defense to provide unbiased and effective oversight, ensuring that reviews and audits are objective and free from influence by the first or second lines of defense.

Specialized AML training must be relevant to the specific risks the corporate banking team faces, including legal/regulatory expectations and the ML/TF typologies applicable to their products and customer base.

Applicable AML laws and regulations (B):“Staff must be aware of the applicable AML/CFT laws and regulatory requirements relevant to their business area.”(CAMS 6th Edition, Chapter: AML Training and Awareness)

Money laundering typologies applicable to corporate loans (D):“Training should include typologies and red flags that are most relevant to the risks present in the specific business line, such as corporate lending.”(CAMS 6th Edition, AML Training for High-Risk Departments)

Incorrect Options:

A: Monetary instrument reporting is more relevant to retail/branch banking.

C: Regulatory exam best practices are for compliance teams, not business-line relationship managers.

A: The first step in any suspicious activity investigation is to review the transaction history and other relevant account information to establish context, identify patterns, and determine if the behavior is consistent with known typologies of money laundering.

“The initial phase of an AML investigation is to review relevant account information and transaction activity to assess whether a SAR filing is warranted.”

This approach ensures that any subsequent decisions, such as escalation, SAR filing, or customer outreach, are based on a comprehensive understanding of the facts.

Paying premium several years in advance and terminating early for a refund (A):“A typical red flag is when a policyholder pays large premiums up front and then seeks early termination to receive a refund. This can be used to launder illicit funds by integrating them into the financial system and then retrieving ‘clean’ money.”(CAMS 6th Edition, Life Insurance ML/TF Risks; FATF Guidance for a Risk-Based Approach for the Life Insurance Sector)

Regularly switching policies and accepting penalties (D):“Frequent changes in insurance policies or products, even at a financial loss, are considered suspicious. This may indicate an attempt to obscure the money trail or integrate illicit proceeds.”(CAMS 6th Edition, ML/TF Red Flags in Life Insurance)

Incorrect Options:

B: Having multiple policies is common and not itself a red flag.

C: High premiums/payouts are not inherently suspicious.

E: Beneficiary payouts to elderly people are not ML/TF red flags.

The Egmont Group is an international network of Financial Intelligence Units (FIUs) established to promote cooperation and information exchange in the fight against money laundering and terrorist financing. One of its core principles is to facilitate secure, timely, and lawful information sharing between FIUs .

The Egmont Group provides a framework, standards, and secure channels—such as the Egmont Secure Web—that allow FIUs to exchange intelligence related to suspicious transactions, typologies, and emerging financial crime risks across borders. This cooperation is essential given the transnational nature of money laundering and terrorist financing.

The Egmont Group does not publish reporting standards, act as a regulator, or publicly disclose investigation outcomes. Its role is operational and intelligence-focused, supporting FIUs while respecting confidentiality and national legal frameworks.

Therefore, arranging information-sharing protocols between FIUs is a fundamental principle of the Egmont Group.

Adverse media screening seeks to identify reputational or financial crime risk by:

B: Identifying links to criminal activity or sanctions.

C: Monitoring regulatory actions and updates for risk associations.

D: Regularly scanning news and public records for negative information.

“Adverse media screening involves collecting and reviewing publicly available information, news, and regulatory actions to detect links to criminal activity or reputational risks.”

(CAMS 6th Edition, Adverse Media Screening; FATF Guidance)

Incorrect:

A and E: Customer sentiment and credit scores are not core to adverse media screening.

A low number of sanctions screening alerts relative to the size and scope of operations may indicate overly restrictive or inappropriate monitoring parameters. Revisiting and adjusting the post-transaction monitoring system parameters and thresholds ensures that the system is calibrated to detect potential sanctions breaches effectively.

The review should prioritize politically exposed persons (PEPs) risk, as state ownership increases the likelihood of political connections, and anti-bribery and corruption risk, since such environments may have higher exposure to corrupt practices and misuse of influence.

When using network analysis tools, it’s important to avoid algorithmic bias toward social criteria to ensure fairness, analyze connections between individuals or entities to identify links and structures, and study relationships within networks to uncover hierarchies, behaviors, movements, and group organization relevant to detecting criminal activity.

Artificial intelligence and machine learning technologies support the risk-based approach (RBA) to AML compliance by enhancing an institution’s ability to identify, assess, and prioritize financial crime risks. Regulatory guidance emphasizes that these technologies should augment—not replace—human judgment .

One key benefit is advanced customer risk assessment . AI and ML can synthesize large volumes of customer data, including background information, transaction behavior, and external risk indicators, allowing institutions to develop more accurate and dynamic risk profiles.

AI and ML also enable the identification of complex networks among seemingly unrelated clients. Through network analytics and pattern recognition, these tools can uncover hidden relationships used in layering and structuring activities.

Additionally, AI-driven systems excel at detecting complex money laundering patterns within transaction data that may not trigger traditional rule-based alerts, improving effectiveness and efficiency.

Automatically generating SARs or adapting thresholds without human oversight is inconsistent with regulatory expectations. Human review and governance remain essential components of AML compliance.

Money Services Businesses (MSBs)are commonly recognized by regulatory and supervisory authorities as havinghigher inherent AML/CFT risk, particularly due to certain business characteristics.

Option B – The prevalence of international wire transfers:

MSBs often facilitatecross-border transactions, which present a higher money laundering and terrorist financing risk due to challenges in verifying customer identity, the origin of funds, and the end destination—especially when dealing with higher-risk jurisdictions.

Option D – The cash-intensive nature of the services offered:

Many MSBs deal primarily incash, which increases the risk ofanonymous transactionsandfunds layering, making it harder to trace illicit activity. Cash is the most vulnerable medium for placement of illicit funds into the financial system.

Option AandOption E, while involving modern technologies,can actually reduce riskwhen implemented with proper controls (e.g., secure digital onboarding and traceable payments enhance auditability).

Option Cdoes not in itself signal high AML risk unless combined with other red flags.

An AML supervisory authority is responsible for overseeing compliance with AML/CFT obligations and has the legal power to conduct inspections, issue findings, impose sanctions, and recommend or enforce license withdrawal.

Supervisory authorities assess whether institutions comply with national AML laws and regulatory standards. When major deficiencies are identified, they may issue a preliminary findings report outlining violations and potential enforcement actions, including license revocation.

Self-regulatory bodies lack the authority to withdraw banking licenses. Law enforcement agencies investigate criminal activity but do not supervise institutions or issue compliance findings reports. FATF is an international standard-setting body and does not conduct institution-level enforcement or issue sanctions.

Therefore, only an AML supervisory authority could issue such a report.

Large individual cash transactions pose the highest money laundering risk for money services businesses. Cash is difficult to trace and, when handled in significant amounts, can be used to introduce illicit funds into the financial system with minimal transparency.

Global organizations must ensure their policies and procedures comply with local laws and regulations in each country where they operate, even when maintaining group-wide consistency. Relying solely on international or U.S. standards does not ensure compliance with all local requirements, which may be more stringent or specific.

“A global group-wide program should ensure adherence to local AML and sanctions laws and regulations in every jurisdiction in which it operates. Local adaptation of policies is essential to address jurisdiction-specific risks and legal requirements.”

(CAMS 6th Edition, International AML/CFT Standards; FATF Recommendations 18, 35; EU & US Sanctions Regulations)

Fingerprint is an inherent factor because it is a biometric trait - something the user is. Inherent factors rely on physical or behavioral characteristics such as fingerprints, facial recognition, or voice, which are unique to the individual.

Cryptocurrencies and convertible virtual currencies present several well-documented money laundering and terrorist financing risks, as identified in FATF guidance and national AML frameworks. These risks largely stem from the pseudonymous nature, speed, and borderless design of virtual asset transactions.

One key risk is the ability to obscure the source of illicit funds . Criminals can move value through wallets and exchanges in ways that make tracing the origin of funds more difficult, particularly when using privacy-enhancing technologies or poorly regulated platforms.

Another significant risk is the facilitation of payments for illicit goods and activities , including drugs, cybercrime services, ransomware, and sanctions evasion. Virtual currencies can be used to settle transactions outside the traditional financial system.

Additionally, criminals frequently engage in layering transactions , rapidly transferring funds across multiple wallets, platforms, or blockchains to hide the origin of illicit proceeds.

Difficulty converting into physical currency is not a recognized AML risk, as most convertible virtual currencies can be exchanged through regulated platforms. Theft of funds is a cybersecurity concern but is not itself a core AML risk indicator.

When a financial institution receives a grand jury subpoena, it is legally compelled to respond, but must do so in a controlled, lawful, and coordinated manner.

The first step is to consult with legal counsel to verify the subpoena’s validity, scope, deadlines, and confidentiality requirements. Legal counsel ensures the institution responds accurately, protects privileged information, and complies with applicable laws.

Notifying the customer would constitute tipping off, which is prohibited. Immediate disclosure without legal review may result in over-disclosure or violation of customer privacy laws. Filing a SAR may be appropriate depending on the facts, but it is not the first step and must not reference the subpoena.

This approach aligns with U.S. AML, BSA, and law enforcement cooperation requirements.

Appointing individuals to serve in official capacities poses a higher money laundering risk because it can be used to obscure the true beneficial ownership and control of the company, making it easier to conceal illicit activities or the identity of those directing the business.

FATF Recommendation 29 states that an FIU should serve as a national center for the receipt and analysis of suspicious transaction reports and other information relevant to money laundering and terrorist financing.

“The FIU should serve as a national center for the receipt and analysis of suspicious transaction reports (STRs) and other information relevant to ML/TF, and for the dissemination of the results of that analysis.”

(CAMS 6th Edition, Role of the FIU; FATF Recommendation 29)

The United Nations develops sanctions regimes primarily to support the peaceful resolution of conflicts, deter unconstitutional or non-democratic changes in governments, and promote the protection of human rights. These objectives aim to maintain international peace, security, and uphold global norms.

The FATF conducts mutual evaluations—a peer review process—whereby member countries assess each other’s AML/CFT systems. This includes on-site visits and reviews by international experts, with public reports containing recommendations for improvement. The process is not punitive and does not impose sanctions.

“FATF mutual evaluations are peer reviews in which experts from member countries assess another member ' s AML/CFT system and provide recommendations.”

(CAMS 6th Edition, International AML/CFT Standards; FATF Methodology, Recommendation 40)

Tax evasion is the deliberate and illegal act of not paying taxes that are legally owed. It is a criminal offense that can have serious consequences, including penalties, fines, and imprisonment.

Scenario-based systems use algorithms to detect suspicious behaviors, such as transactions occurring at unusual times, those exceeding specified thresholds, or those taking place in locations inconsistent with a customer ' s typical activity. These anomalies help identify potential financial crime risks.

The remote gambling sector presents unique money laundering and terrorist financing risks due to its online, non-face-to-face nature , as recognized in FATF and national regulatory guidance.

A major risk is that customers are not physically present for identification , which increases impersonation and identity fraud risks and requires robust digital onboarding controls.

Another significant risk is the use of anonymous prepaid cards or other anonymous payment methods . These instruments reduce traceability and can be used to introduce illicit funds into gambling platforms with limited customer identification.

Additionally, numerous low-level transactions may indicate structuring behavior designed to avoid enhanced due diligence thresholds and monitoring controls. This tactic allows criminals to layer transactions while appearing consistent with normal gambling behavior.

Large cash deposits are less relevant in remote gambling, as transactions are typically electronic. Betting beyond affordability may indicate problem gambling but is not, by itself, a core AML risk indicator.

A key benefit of machine learning in identifying suspicious transactions is its adaptability to new anti-financial crime typologies through continuous model training, enabling the system to evolve with emerging threats and patterns.

A: The absence of professional oversight or accounting/auditing standards creates a high-risk environment for financial statement manipulation. Without external checks or mandated standards, criminals can more easily falsify statements to hide illicit assets.

“The lack of regulatory oversight and professional standards in accounting and auditing significantly increases the risk of manipulation and fraud in financial reporting.”(CAMS 6th Edition, Professional Service Providers; FATF Guidance on the Risk-Based Approach for Accountants)

Potential indicators of terrorist financing abuse in non-profit organizations include large, unaccounted cash donations from anonymous sources, which can disguise illicit funding, and operations in high-risk jurisdictions with limited oversight, where regulatory and monitoring frameworks may be weak.

The compliance team should request further clarification to assess the AML risk appropriately. This includes understanding which cryptoassets were sold and whether the exchange used applies adequate due diligence. These details help determine the legitimacy of the source of funds and ensure compliance with AML requirements.

Risks tied to the misuse of gaming accounts include transferring illicit funds between players undetected, structuring transactions to avoid reporting thresholds, and providing false personal information to evade KYC and regulatory oversight, all of which can facilitate money laundering and other financial crimes.

A robust transaction monitoring system is a core component of an effective Anti-Money Laundering (AML) and Counter-Financial Crime (AFC) program. Regulatory guidance from FATF and national supervisors emphasizes that the primary purpose of transaction monitoring systems is to detect unusual or suspicious activity by analyzing customer transactions and identifying anomalies or patterns that may indicate money laundering, terrorist financing, or other financial crimes.

These systems use predefined rules, thresholds, and increasingly advanced analytics to monitor transactions in real time or retrospectively. Alerts generated by the system are reviewed by compliance professionals, who determine whether further investigation or reporting is required.

While transaction monitoring systems may support the preparation of regulatory reports , such as SARs or CTRs, the actual filing of these reports typically requires human review and approval and is not the defining capability of the monitoring system itself. Features such as automatic document translation or integration of social media profiles are not considered core or necessary functions under AML regulatory expectations.

Therefore, the essential capability of a robust transaction monitoring system is its ability to monitor transactions and detect anomalies indicative of suspicious activity .

Nominee shareholders may be used for legitimate commercial reasons; however, FATF guidance identifies nominee arrangements as a significant money laundering risk when they obscure beneficial ownership.

The greatest risk arises when nominee shareholders provide anonymity to the true beneficial owner, preventing transparency in public registers and complicating due diligence. Criminals may exploit this opacity to conceal ownership, evade sanctions, launder illicit proceeds, or avoid tax and regulatory scrutiny.

The ability to hide ownership undermines one of the core objectives of AML/CFT frameworks: identifying and verifying beneficial owners. As a result, regulators require enhanced due diligence and clear documentation when nominee shareholders are involved.

Other features—such as administrative efficiency, compliance with local laws, or ease of share transfer—do not inherently increase financial crime risk when transparency and disclosure requirements are met.

Verifying a customer’s identity is a fundamental CDD requirement under the FATF Recommendations, ensuring you know who your customer is.

Identifying the beneficial owner is required to uncover the natural persons ultimately controlling or benefiting from an account, closing the gap that would allow misuse of corporate vehicles.

The finance industry is inherently vulnerable to money laundering risks due to the nature, scale, and complexity of its operations. FATF and global regulators consistently identify several structural characteristics that increase exposure to illicit financial activity.

One major vulnerability is the availability of complex financial products and services , such as derivatives, correspondent banking, and structured investments. These products can be misused to disguise the origin of funds through layering and complex transaction chains.

Another key risk arises from engagement with high-risk jurisdictions . Financial institutions often operate across borders, including in countries with weak AML controls or limited regulatory oversight, increasing exposure to money laundering and terrorist financing risks.

Additionally, high transaction volumes present a significant challenge. The sheer scale and speed of transactions make it difficult to detect suspicious activity, particularly when illicit transactions are deliberately structured to blend in with legitimate activity.

In contrast, heightened regulatory obligations and investments in technology are risk-mitigating factors , not vulnerabilities. They are designed to reduce exposure to financial crime rather than increase it.

High-risk customers present elevated money laundering and terrorist financing risks, requiring careful consideration before onboarding. FATF guidance emphasizes that higher-risk relationships demand stronger controls due to their increased vulnerability to misuse.

One key risk is the greater potential for laundering illicit proceeds . High-risk customers may operate in sectors, jurisdictions, or business models that are frequently abused for financial crime, increasing the likelihood that illicit funds could pass through the institution.

Another significant risk is the increased likelihood of involvement in financial crimes , either directly or indirectly. This may include exposure to corruption, fraud, sanctions evasion, or organized crime networks.

Enhanced due diligence is not a risk but rather a risk-mitigating control imposed by regulators. Reduced regulatory scrutiny is incorrect, as high-risk customers are subject to greater—not lesser—oversight.

The United Nations Security Council (UNSC) has evolved its sanctions framework to minimize unintended humanitarian consequences. In line with international best practice, the UNSC increasingly relies on targeted sanctions , also known as “smart sanctions,” rather than broad-based measures.

Targeted sanctions are designed to focus specifically on individuals, entities, or activities responsible for threats to international peace and security. These measures may include asset freezes, travel bans, and arms embargoes directed at specific actors. By narrowing the scope, targeted sanctions aim to reduce the negative impact on innocent civilian populations and legitimate economic activity.

In contrast, comprehensive sanctions apply to entire countries or sectors and often result in significant humanitarian and economic harm. The term “comprehensive targeted sanctions” is not a recognized sanctions category.

Therefore, targeted sanctions are the preferred UNSC tool when the objective is to minimize adverse effects on civilians while maintaining pressure on responsible parties.

Information obtained directly from a government-managed registry is considered a reliable, independent source because it is authoritative, verified, and maintained by an official source, reducing the risk of inaccuracies or manipulation.

Regulatory frameworks and enforcement actions consistently emphasize individual accountability at the highest levels of governance when AML/CFT compliance programs are deficient in design or implementation.

The board of directors is ultimately responsible for oversight of the institution’s AML/CFT framework. This includes approving policies, setting risk appetite, and ensuring that adequate resources and governance structures are in place. Failure to fulfill these responsibilities can result in regulatory findings and personal accountability.

Senior management is responsible for implementing the board-approved AML/CFT strategy and ensuring that controls operate effectively in practice. This includes overseeing compliance functions, addressing identified weaknesses, and ensuring timely remediation. Deficiencies in program design—such as inadequate risk assessments or ineffective controls—often lead regulators to hold senior management accountable.

While the compliance department plays an important role in execution and advisory functions, accountability for program design and effectiveness rests with the board and senior management, not committees or individual departments.

Public-Private Partnerships (PPPs)are collaborative initiatives involvinglaw enforcement, FIUs, and financial institutions. Their objective is to improve theefficiency and effectivenessof the fight against money laundering, terrorist financing, and other financial crimes bysharing both operational and strategic intelligence.

Option A – Exchange operational information between public authorities and obliged entities:

PPPs often facilitate real-time or near-real-time information sharing that supportsspecific investigations and the detection of suspicious activity, helping financial institutions respond quickly and accurately to ongoing threats.

Option B – Exchange strategic information between FIUs and obliged entities:

Strategic-level intelligence sharing helps financial institutionsunderstand typologies, risk trends, and evolving criminal methods, thereby strengthening their risk assessments and transaction monitoring frameworks.

Option Cis incorrect: Strategic information exchange between private institutions is limited and heavily regulated.

Option Dis incorrect: FATF does not collect or manage databases of suspicious activity reports; it sets standards and reviews national frameworks.

Reference data screening is a core element of AML/CFT programs and typically covers:

Customers (B):“All customers must be screened against sanctions, PEP, and adverse media lists as part of onboarding and ongoing due diligence.”(CAMS 6th Edition, Due Diligence and Screening)

Third-party service providers (C):“Screening should extend to relevant third parties, such as agents and service providers, to prevent indirect exposure to sanctioned entities.”(CAMS 6th Edition, Third-Party Screening; FATF Recommendations)

Incorrect Options:

A: Types of payment messages are not screened; the entities/individuals are.

D: Customer spouses may be screened in some KYC processes but are not a standard dataset for reference screening.

Money laundering typically occurs in three stages: placement, layering, and integration . The placement stage involves introducing illicit funds into the financial system.

In the real estate sector, using cash to purchase property is a classic placement method. Cash payments allow criminals to inject large amounts of illicit proceeds directly into high-value assets, often bypassing traditional banking scrutiny.

Using trusts to transfer ownership and rapidly reselling property are more commonly associated with layering or integration , where ownership and transaction complexity is used to disguise the origin of funds. Paying routine invoices via online banking is consistent with legitimate business activity and does not represent placement.

Therefore, cash purchases of property most directly align with the placement stage of money laundering.

Beneficial ownership registers maintained by the country of incorporation are the most reliable external source for verifying beneficial ownership during onboarding, as they are official records mandated by law and typically subject to regulatory oversight.

Accountants are classified as designated non-financial businesses and professions (DNFBPs) under FATF standards and must apply a risk-based approach to AML/CFT compliance.

A customer acceptance policy is a key tool that helps accountants define which clients or engagements fall outside their risk appetite. This supports consistent onboarding decisions and ensures high-risk clients are either subject to enhanced due diligence or declined.

Additionally, due to the nature of accounting services—such as advisory, tax preparation, and financial reporting— traditional automated transaction monitoring systems used by banks are often not appropriate . Instead, accountants rely more heavily on engagement-based risk assessments, client profiling, and professional judgment.

Accountants are subject to record-keeping requirements longer than two years in most jurisdictions, and geographic risk is always relevant when assessing AML/CFT exposure. Risk assessments must be comprehensive and proportionate, not artificially limited.

Cryptoassets, such as cryptocurrencies, pose specific ML/TF risks due to their technological characteristics and usage patterns:

Potential for anonymity (C): Cryptoassets allow users to make transactions without revealing their true identities, which hinders law enforcement from tracking illicit activity. The CAMS 6th Edition states:“Cryptoassets can be transferred or exchanged between users without the need for identification, presenting a significant risk due to the potential for anonymity.”(CAMS 6th Edition, Chapter: Risks and Methods of Money Laundering and Terrorist Financing, Virtual Assets section)

Global reach (D): Cryptoassets operate on a global scale, enabling rapid cross-border transfers without the limitations of traditional financial systems. This increases the complexity of monitoring and controlling illicit transactions.“The global nature of virtual assets makes it easy for criminals to move value across borders quickly, evading jurisdictional controls.”(CAMS 6th Edition; FATF Guidance on Virtual Assets 2019)

Use to layer illicit funds (F): The ability to move cryptoassets between numerous wallets and exchanges allows criminals to obscure the source of funds through layering, a key stage of money laundering.“Layering can be achieved by rapidly moving cryptoassets between wallets, exchanges, and across different jurisdictions, making tracing more difficult.”(CAMS 6th Edition, Chapter: Risks and Methods of Money Laundering and Terrorist Financing)

OFAC sanctions are a key element of the U.S. AML/CFT framework. According to the CAMS 6th Edition and OFAC regulations:

Blocked funds must be placed into an interest-bearing account on a financial institution ' s books (B):“Blocked property must be held in a separate interest-bearing account on the books of the U.S. financial institution.”(CAMS 6th Edition, Sanctions Compliance; OFAC FAQs)

Sanctions can be either comprehensive or selective using the blocking of assets and trade restrictions (C):“OFAC administers both comprehensive and targeted (selective) sanctions programs to fulfill U.S. foreign policy and national security goals.”(CAMS 6th Edition, Sanctions Compliance)

Incorrect Options:

A: OFAC can sanction entities, vessels, and organizations—not just individuals or those in foreign countries.

D: There is no automatic expiration of OFAC sanctions after five years.

Modern KYC solutions help reduce identity theft, provide reliable customer authentication to build trust, and shorten authentication times, enhancing both security and efficiency in customer onboarding and ongoing due diligence processes.

Professional service providers can be misused as enablers of money laundering when they abuse their trusted positions and expertise. FATF guidance highlights several risks linked to such abuse.

The creation of shell companies is a common method used to obscure beneficial ownership and facilitate placement or layering of illicit funds. Similarly, opening third-party accounts to mask the true client identity directly undermines transparency and due diligence requirements.

Additionally, actively directing or facilitating the structuring or movement of illicit funds constitutes direct involvement in money laundering schemes and is a serious criminal offense.

By contrast, opening estate or trust accounts for legitimate, transparent purposes does not inherently pose a financial crime risk when proper due diligence is applied.

In situations involving significant AML concerns, especially with high-risk clients, thecompliance officer must follow proper escalation procedureswithin the institution. The appropriate course of action is toescalate the matter to a senior governance body, such as ahigh-risk client committee, which is typically tasked with balancing AML risk against business considerations.

Unilateral offboarding (Option B)may violate internal protocols.

Persuading the relationship manager (Option C)bypasses formal governance.

Delaying action (Option D)risks further exposure to regulatory or reputational damage.

This escalation ensuresdocumented risk-based decision-makingand demonstrates to regulators that the institution appliesstructured and objective AML governance.

While regulatory compliance, cost efficiency, and operational considerations are important, the primary objective of AML/CFT measures is to reduce and manage the risks and threats of financial crime . FATF emphasizes that effectiveness should be measured by outcomes, not merely by technical compliance.

An AML/CFT framework may fully comply with laws and still be ineffective if it fails to detect, deter, or disrupt money laundering and terrorist financing. Regulators increasingly focus on whether systems and controls actually identify suspicious activity, prevent misuse of the financial system, and support law enforcement efforts .

Minimizing operational burden and controlling costs are secondary considerations and must not compromise risk mitigation. A cost-effective system that fails to detect financial crime would not meet regulatory expectations.

Therefore, the true measure of effectiveness lies in how well systems and controls mitigate financial crime risks and threats in practice.

Many jurisdictions lack robust sanctions frameworks, requiring international cooperation and education to improve compliance.

Option B (Correct):Educational initiatives such as AML/sanctions training and workshops help raise awareness and build capacity.

Option D (Correct):Bilateral cooperation allows knowledge-sharing and technical assistance between regulatory authorities.

Why Other Options Are Incorrect:

Option A (Incorrect):Trade restrictions may pressure non-compliant nations, but they do not directly improve sanctions awareness.

Option C (Incorrect):Enforcing fines without prior education or assistance is ineffective and may create diplomatic tensions.

Best Practices for Sanctions Awareness & Compliance:

Develop international AML/sanctions training programs for emerging markets.

Encourage diplomatic engagement to strengthen legal frameworks.

Leverage FATF’s Mutual Evaluation process to assess progress.

Unregulated online gambling and gaming can lead to significant economic and societal costs, including increased crime, financial distress, addiction, and strain on public health and social services. These impacts extend beyond individual harm and affect communities and national economies.

The CAMS 6th Edition clearly identifies a risk-based approach as the cornerstone of effective AML/CFT programs. Risk assessments should consider various risk factors that directly influence exposure to ML/TF.

Product risk (A): Certain products or services may present higher ML/TF risks, such as private banking, correspondent banking, or cash-intensive products.“Products and services offered, and their inherent risk levels, must be assessed as part of the risk-based approach.”(CAMS 6th Edition, AML Compliance Program, Risk Assessment)

Geographic risk (C): Jurisdictions where the customer operates or where transactions are conducted may present higher or lower risks due to factors such as weak AML regulations or high corruption.“Geographic risk considers where a customer is located and/or where transactions occur, referencing countries with increased risk, such as those identified by the FATF.”(CAMS 6th Edition, Risk Assessment Factors)

Customer risk (D): The type of customer, such as PEPs, non-residents, or companies with complex structures, may present higher ML/TF risks.“Customer risk assessment is based on the customer’s profile, activity, and ownership structure, and is a critical component in risk-based monitoring.”(CAMS 6th Edition, CDD/EDD)

Incorrect Options:

B (Credit risk): Related to creditworthiness, not ML/TF.

E (Liquidity risk): Refers to a firm’s ability to meet financial obligations; not an AML risk factor.

The United Nations Security Council (UNSC) is the only body with the legal authority under international law to impose binding sanctions on countries, entities, or individuals.

“The Security Council’s primary function in imposing sanctions is to maintain or restore international peace and security. These sanctions are legally binding on all UN member states.”

(CAMS 6th Edition, Chapter: International Sanctions and Proliferation Financing; United Nations Charter, Article 41)

Incorrect Options:

B: Sanctions may address AML/CFT failings, but the core mandate is international peace/security.

C: The UNSC does not primarily conduct research or impact analysis.

D: The purpose is international peace/security, not only domestic financial stability.

In the context ofgambling and gaming sectors, a well-known money laundering typology is the use of platforms tointroduce illicit funds and withdraw them as " winnings " . When a customerdeposits large cash amounts and quickly withdraws themwithout engaging in actual gambling, it indicates " placement and layering " techniques.

This behavior is indicative of attempts todisguise the origin of illicit funds, converting them into legitimate-looking financial flows. It is considered a classic red flag in AML programs related to casinos and online gaming.

When developing and maintaining AML policies, standards, and procedures, banks should rely on the National Risk Assessment, regulatory guidance or publications, and guidance issued by international bodies to ensure their frameworks align with both domestic and global best practices and risk considerations.

A: FIs should ensure they have a general understanding of virtual assets and VASP operations to assess risks accurately.

C: Enhanced KYC measures are recommended for VASPs due to their higher ML/TF risk profile.

“FIs must understand the business model and risk of VASPs and apply enhanced due diligence as required by FATF and regulatory guidance.”(CAMS 6th Edition, Virtual Assets and VASPs; FATF Guidance)

Incorrect:

B: While monitoring transactions is important, it’s not a primary initial consideration for onboarding.

D: The FI’s own holdings are not relevant to due diligence on VASPs.