ACAMS CAMS Practice Questions with Explanations

Correct answer: A

A shell company presents multiple risk indicators in this scenario: the business was established five years ago but has minimal web presence beyond claiming to be real estate, one principal operates internationally from abroad, the other works from a recreational vehicle (no fixed business address), and the vague business description combined with unstable principals are classic shell company characteristics. These factors collectively suggest the entity may lack legitimate operational substance and exist primarily to facilitate financial transactions, warranting enhanced due diligence for potential money laundering or other illicit activities.

Why the other options are wrong:

• B. Human trafficking indicators would involve movement of people and exploitation rather than the business structure and operational concerns presented.
• C. A politically exposed person designation requires a government official role, which is not indicated for either principal in this scenario.
• D. While real estate can be used for money laundering, the specific red flags here- shell company characteristics, minimal business details, and unstable principals-point more directly to shell company status rather than established real estate laundering activity.

Correct answer: D

The transfer of funds to multiple accounts across three different foreign jurisdictions is the primary suspicious activity warranting focus in a suspicious transaction report. This pattern indicates potential structuring to avoid detection and suggests the customer may be deliberately moving illicit funds across borders through multiple routes, which is a classic money laundering technique. The geographic dispersion across jurisdictions significantly increases the likelihood of illicit intent compared to other factors.

Why the other options are wrong:

• A. Large checks as account opening deposits are common in legitimate business and do not inherently constitute suspicious activity without additional context.
• B. Using different branches is a normal customer practice and does not itself indicate suspicious activity.
• C. Transferring most funds from an account is a common transaction pattern and is not suspicious without the international jurisdiction component that suggests intentional dispersal.

Correct answer: B

Ensuring compliance with new anti-money laundering laws requires a comprehensive approach that includes changing procedures to collect required information, updating systems to accommodate new requirements, and training employees on the new procedures. This three-pronged implementation ensures the institution can operationally meet the new legal requirements, staff understand their roles, and systems are capable of supporting compliance. Procedures and training alone are insufficient without system changes, and system changes alone fail without staff understanding.

Why the other options are wrong:

• A. Changing procedures alone does not address the need for system updates and employee training required for full compliance.
• C. Asking existing customers to voluntarily provide information is passive and unreliable; institutions must actively obtain required information through updated procedures and systems.
• D. Automatic information collection from all customers is impractical and does not account for the need to establish procedures and ensure staff training on how to implement and maintain compliance.

Correct answer: D

The auditor's role during the correction phase is to validate that management has successfully remediated the identified deficiency. The auditor maintains independence by overseeing and verifying the remediation rather than directing it or developing corrective procedures. Validation occurs after management has indicated resolution and involves testing to confirm the deficiency has been effectively corrected and controls are functioning as intended.

Why the other options are wrong:

• A. Directing remediation violates audit independence; management is responsible for correcting deficiencies identified in audits.
• B. Developing procedures is a management responsibility, not an auditor function; auditors assess existing procedures but do not create them.
• C. Providing training to operational departments is a management function; auditors may provide feedback on findings but should not be directing training programs.

Correct answer: B

The Black Market Peso Exchange is closely associated with international trade-based money laundering, particularly in cross-border commerce between countries with currency restrictions. This method involves the use of international trade transactions-such as over- or under-invoicing of goods and services-to move value across borders while creating a veneer of legitimacy through trade documentation. It is specifically designed to exploit international trade flows and currency markets.

Why the other options are wrong:

• A. Shell companies are general-purpose laundering vehicles not specifically tied to international trade mechanisms.
• C. Structuring cash deposits is a domestic banking technique unrelated to international trade infrastructure.
• D. Investing in legitimate businesses is a general placement technique not specifically associated with international trade.

Correct answer: C

The Financial Action Task Force 40 Recommendations focus on ensuring that non-profit organizations have adequate transparency, governance, and controls to prevent funds intended for legitimate charitable purposes from being diverted to terrorist organizations. Countries should implement oversight mechanisms that enable detection and prevention of fund diversion while preserving legitimate non-profit operations. This approach balances national security with the preservation of civil society organizations.

Why the other options are wrong:

• A. Blanket asset freezing of all non-profits is overly broad and would impair legitimate charitable work without specifically addressing terrorist financing risks.
• B. Registration requirements alone do not prevent abuse; oversight and controls are more important than mere registration.
• D. Forbidding cross-border transactions would eliminate legitimate international humanitarian work and is more restrictive than necessary; the focus should be on transparency and monitoring rather than blanket prohibitions.

Correct answer: B

The employee should report this conversation to the compliance officer because the colleague's conduct appears to constitute potential tipping off or advising a customer on how to avoid regulatory reporting obligations, which violates anti-money laundering laws and institutional policy. The compliance officer is the appropriate internal authority responsible for investigating and addressing potential AML violations by employees. This is an internal compliance matter that must be escalated through proper channels.

Why the other options are wrong:

• A. Local police are not the appropriate channel for internal compliance violations; law enforcement involvement would be determined by the compliance officer and institution after investigation.
• C. Simply telling the colleague it violates policy does not address the potential violation or ensure it is properly investigated and documented.
• D. Ignoring the situation permits potential regulatory violations to continue and breaches the employee's own compliance responsibilities.

Correct answer: D

The integration stage of money laundering is the final phase where illicit funds are reintegrated into the legitimate economy through acquisition of real assets or investments. Option D correctly describes this stage-using previously deposited illicit funds to purchase a luxury vehicle represents the placement of dirty money into the mainstream financial system by converting it into tangible assets. Options A, B, and C describe placement or layering activities that occur earlier in the laundering cycle, not the final integration phase.

Why the other options are wrong:

• A. Depositing illicit funds into a front company account represents the placement stage, the first phase of money laundering.
• B. Directing third parties to exchange cash for negotiable instruments is a layering technique used to obscure the source of funds, not integration.
• C. Wiring funds between bank accounts is a layering activity designed to distance illicit money from its source, not the integration phase.

Correct answer: D

The USA PATRIOT Act Section 311 grants the Treasury Department and banking regulators the authority to impose special measures on foreign financial institutions determined to be of primary money-laundering concern. These special measures can include prohibiting U.S. banks from maintaining correspondent accounts with designated institutions. While the Act addresses shell banks and correspondent banking, option D identifies the specific provision most directly impacting foreign financial institutions as a class by enabling targeted sanctions.

Why the other options are wrong:

• A. Enhanced due diligence for foreign shell banks is part of the Act but is narrower in scope than the authority to impose special measures.
• B. The PATRIOT Act does not expand sanctions to U.S. branches of foreign institutions as its primary mechanism.
• C. The Act does not extend anti-money laundering program requirements to all foreign financial institutions globally.

Correct answer: D

In crowdfunding platforms, projects that start, close, and become fully funded within a very short timeframe present the highest anti-money laundering risk because this pattern is characteristic of money laundering schemes. Rapid funding from multiple small donors makes it difficult to trace illicit sources and creates the appearance of legitimate crowdfunding activity while actually integrating criminal proceeds. This compressed timeline is suspicious and inconsistent with typical crowdfunding dynamics, indicating potential use of the platform for layering illicit funds.

Why the other options are wrong:

• A. A large number of donors does not necessarily indicate money laundering risk; high donor volume is common in legitimate successful campaigns.
• B. Quick funding after project launch can occur with legitimate viral campaigns and popular causes.
• C. The monetary success threshold alone has no correlation with anti-money laundering risk.

Correct answer: C

According to the Basel Committee's Customer Due Diligence for Banks guidelines, the appropriate compliance control for identifying politically exposed persons is to review relationships at account opening and on a periodic basis (option C). This ongoing review approach ensures that institutions can identify PEPs both when relationships are established and detect when existing customers subsequently assume PEP positions. Periodic review is essential because an individual's PEP status can change over time, requiring continuous monitoring rather than one-time verification.

Why the other options are wrong:

• A. Limiting PEP identification to local figures is insufficient; the Basel framework addresses all PEPs regardless of geographic scope.
• B. Reviewing only at relationship establishment misses individuals who later become PEPs or whose status changes during the customer relationship.
• D. Relying solely on customer self-disclosure is inadequate; institutions must conduct independent verification and ongoing screening for PEP status.

Correct answer: A

Frequent cash withdrawals by a charity are a significant red flag for terrorist financing because cash transactions leave minimal audit trails and can be easily transferred to terrorist organizations without detection. This behavior is particularly concerning when combined with the charity's operations in countries with active terrorist cells, as funds can be diverted without accountability. The other factors-branch locations in multiple countries, donations from European countries, and separate expense accounts-are legitimate business practices for international charitable organizations.

Why the other options are wrong:

• B. International branch locations are normal for charities operating globally.
• C. Receiving donations from donor countries is standard and expected for legitimate charities.
• D. Maintaining separate accounts for different expense categories is standard accounting practice.

Correct answer: C

A suspicious transaction report on a PEP account combined with evidence of political corruption in the official's home country must be escalated to the bank's anti-money laundering (AML) officer. The AML officer has the responsibility and authority to investigate potential money laundering involving PEPs, coordinate with compliance functions, and determine whether additional reporting obligations exist. This is a core AML compliance function.

Why the other options are wrong:

• A. Board escalation occurs after AML review determines appropriate governance-level action.
• B. The line of business executive lacks AML authority and should not receive PEP- related concerns directly.
• D. The FATF does not maintain a PEP hotline; escalation follows internal compliance procedures.

Correct answer: B

Anti-money laundering risk assessments should be updated after a merger or acquisition because such events materially change the bank's business lines, customer base, products, and geographic footprint. These structural changes introduce new compliance risks and may reveal gaps in the combined entity's AML controls. While periodic updates occur, material business events like M&A require prompt reassessment to maintain effective risk management.

Why the other options are wrong:

• A. Two-year cycles are too rigid; events-based triggers are the primary driver for updates.
• C. Changes in board composition alone do not materially alter AML risk unless accompanied by strategic business changes.
• D. The FATF does not issue operational directives to individual banks requiring specific assessment updates.

Correct answer: A

A privately-owned ATM installed at the restaurant is a significant red flag because it enables the business to convert deposited cash into other forms or to withdraw funds without creating banking records, potentially facilitating structuring and layering activities in money laundering schemes. Lower cash deposits, increased credit card receipts, and patio construction all have legitimate business explanations-customers may simply prefer card payments, and restaurant improvements are normal capital investments. The ATM, however, provides a mechanism to manipulate deposit records and obscure the flow of funds.

Why the other options are wrong:

• B. Lower cash deposits can be legitimately explained by customers' preference for credit card transactions and changing payment behaviors.
• C. Increased credit card receipts reflect normal market trends and customer payment preferences with no inherent suspicious activity.
• D. Construction of a patio dining area is a standard business expansion and improvement with clear legitimate business purpose.

Correct answer: A

A peer scenario addresses the weakness by comparing a customer's activity against similar customers in the same industry or peer group. When a surveillance system fails to alert on consistently abnormal activity over extended periods, peer benchmarking helps identify deviations from normal patterns for comparable businesses. This dynamic approach catches gradual abnormalities that fixed-threshold systems miss, because the baseline itself adjusts to legitimate peer variations while still detecting when an individual customer significantly diverges from their peer cohort's established patterns.

Why the other options are wrong:

• B. Income scenarios focus on comparing activity to declared income levels but do not specifically address the problem of consistently abnormal activity over long periods.
• C. Mapping scenarios involve geographic or transactional relationship analysis, not comparative behavioral benchmarking against similar customers.
• D. Below-the-line scenarios address transactions below reporting thresholds; they do not solve the problem of undetected consistently abnormal long-term activity.

Correct answer: D

When an investigator identifies suspicious transaction activity and files a suspicious activity report, the appropriate escalation is to the bank's anti-money laundering officer, who has institutional responsibility for monitoring, investigating, and reporting suspicious activities to regulatory authorities. The bank's AML officer ensures proper documentation, coordination with compliance functions, and appropriate regulatory notification. While the owner's reputation as a philanthropist may seem reassuring, it does not eliminate the suspicious indicators. The audit committee, chairman, and the account owner are not appropriate recipients for active investigation escalation.

Why the other options are wrong:

• A. The audit committee provides oversight but is not the operational recipient for active suspicious transaction investigations.
• B. The chairman of the board is not the appropriate operational contact for day-to-day suspicious activity reporting.
• C. Alerting the account owner about a suspicious activity investigation would compromise the investigation and is never appropriate.

Correct answer: A

The correct course of action is to request that the compliance officer be included on the new product approval committee. Compliance must be involved early in the product development process to identify potential regulatory risks, money laundering vulnerabilities, sanctions exposure, and other compliance issues before a product is approved. This proactive integration ensures that compliance considerations shape the product design from inception rather than discovering problems after approval. Going directly to the board is premature and circumvents proper governance, preparing an extensive report before formal notification wastes resources, and waiting for approval before research begins defeats the purpose of prospective risk management.

Why the other options are wrong:

• B. Escalating to the board to shut down the service immediately is premature and bypasses proper governance processes.
• C. While gathering information is useful, the primary action should be structural involvement rather than informal research.
• D. Waiting until formal approval before initiating extensive research allows risks to be embedded in the approved product; compliance must assess risks during development.

Correct answer: B

The Egmont Group is an international forum established specifically to enable Financial Intelligence Units from around the world to improve their cooperation in combating money laundering and the financing of terrorism, while fostering implementation of domestic AML/CFT programs. Option B accurately captures this dual mission: improving international FIU cooperation and supporting domestic program development. Option A omits the FIU-specific focus and emphasis on cooperation, Option C incorrectly emphasizes law enforcement instead of FIU coordination, and Option D inappropriately centers on state and federal governments rather than the international FIU network.

Why the other options are wrong:

• A. This omits the specific focus on Financial Intelligence Units and underemphasizes the cooperative dimension of the Egmont Group's mission.
• C. While law enforcement plays a role, the Egmont Group's core mission centers on FIU cooperation, not general law enforcement communication.
• D. The Egmont Group focuses on international FIU cooperation rather than coordination with individual state and federal governments.

Correct answer: A

Using money orders from multiple banks to pay insurance premiums is a classic structuring red flag designed to avoid reporting thresholds and create transactional fragmentation. This pattern suggests an attempt to obscure the source of funds and evade detection mechanisms. The other options reflect legitimate insurance business activities: purchasing property insurance for real estate development is normal commercial practice, establishing separate group policies for corporate affiliates is standard organizational structure, and establishing charitable annuities with international nonprofits is a legitimate philanthropic transaction.

Why the other options are wrong:

• B. Purchasing property insurance for real estate development by a client from a high- risk jurisdiction is legitimate business activity.
• C. Establishing separate group life insurance policies for multiple corporate affiliates reflects normal organizational and insurance practices.
• D. A $100,000 charitable annuity with a legitimate international nonprofit organization is a standard philanthropic transaction.

Correct answer: B

The branch manager should conduct further investigation before taking action. While the activity exhibits several potential suspicious indicators-consistent same-teller visits, same deposit amounts, ethnic group connections, informal gift-giving, and foreign language communication-these factors alone do not conclusively prove collusion or money laundering. The observations could have legitimate explanations: customers may prefer a familiar teller, recurring deposits may reflect regular legitimate business cycles, and ethnic community networking is not inherently suspicious. Before taking personnel actions or operational changes, the manager must investigate more thoroughly to determine whether actual suspicious activity exists. Transferring the teller prematurely could be unjust, encouraging ethnic business development ignores the concern, and redirecting customers assumes guilt before investigation.

Why the other options are wrong:

• A. Transferring the teller without investigation would be an unjust personnel action based on circumstantial indicators.
• C. Encouraging more ethnic community business assumes the activity is legitimate and ignores the need for investigation.
• D. Redirecting customers to other tellers assumes collusion before any investigation and punishes both parties based on suspicion.

Correct answer: D

When law enforcement makes an inquiry about a customer, the bank must verify the legitimacy and authority of the request before disclosing any customer information. Requesting a formal letter serves as documentation that protects the bank legally and ensures the request comes from an authorized official with proper jurisdiction. This formal verification process is standard practice under privacy regulations and know-your- customer protocols.

Why the other options are wrong:

• A. Confirming customer status without verification exposes the bank to unauthorized disclosure and potential privacy violations.
• B. While governance is important, the immediate requirement is to verify the request itself before any board involvement.
• C. Providing information without verifying the request's legitimacy violates customer privacy protections and regulatory requirements.

Correct answer: D

Cash deposits in cities where the customer does not reside or conduct business, followed by same-day withdrawals, exhibit the classic pattern of structuring and layering associated with human trafficking. This rapid movement of funds without legitimate business purpose is a hallmark indicator of illicit activity. The geographic inconsistency combined with the timing pattern creates the strongest red flag for suspicious transactional review.

Why the other options are wrong:

• A. Wire transfers from migrant-heavy countries alone are not necessarily indicative of trafficking without additional suspicious patterns.
• B. Cash deposits in cities where the customer resides and conducts legitimate business represent normal commercial activity.
• C. While deposits in unusual locations warrant attention, the absence of immediate withdrawal is less suspicious than the deposit-withdrawal pattern.

Correct answer: B

Under Section 104 of the USA PATRIOT Act, when a foreign bank opens an account at a U.S. bank, the U.S. bank must obtain the identity of the owners and their percentage of ownership. This requirement is designed to establish beneficial ownership and prevent money laundering through opaque ownership structures. While other information may be useful, ownership identity and percentages are the specific mandatory requirement.

Why the other options are wrong:

• A. A complete client list is not required under the USA PATRIOT Act; it would be impractical and exceeds statutory requirements.
• C. Management team structure and identity are not specifically mandated under the USA PATRIOT Act's foreign bank account requirements.
• D. Anti-money laundering compliance training program details are not specifically required information under the USA PATRIOT Act for foreign bank accounts.

Correct answer: A

Annuities are particularly vulnerable to money laundering because they can be purchased with large cash payments, provide liquidity through surrender provisions, and generate investment returns that can obscure the source of funds. The flexibility in premium payments and redemption options makes annuities attractive for layering illicit proceeds into the legitimate financial system.

Why the other options are wrong:

• B. Casualty insurance requires clear documentation of insurable interest and is heavily documented, making it less vulnerable to money laundering.
• C. Collateral is not an insurance product; it refers to assets pledged as security for a loan.
• D. Regulated pensions have strict regulatory oversight and limited liquidity, making them less attractive for money laundering schemes.

Correct answer: B

According to the Basel Committee's Customer Due Diligence paper, a customer acceptance policy is an essential element of KYC standards. This policy establishes the bank's criteria for accepting or declining customer relationships and ensures that due diligence is consistently applied based on risk assessment. A formal acceptance policy is foundational to any robust KYC framework.

Why the other options are wrong:

• A. Annual staff training is important for compliance but is not identified as an essential element of KYC standards in the Basel paper.
• C. The same KYC requirements need not be applied uniformly; risk-based approaches require differentiated KYC based on customer risk profiles.
• D. While senior management review is best practice, it is not mandated as an essential element in the Basel Committee's customer due diligence requirements.

Correct answer: C

Under the USA PATRIOT Act Section 312, when a foreign bank wants to provide payable through account services through a U.S. correspondent bank, the foreign bank must provide a U.S. agent or representative who can receive service of legal process. This requirement ensures that there is a person within U.S. jurisdiction who can be held accountable for the bank's compliance obligations and can receive regulatory communications.

Why the other options are wrong:

• A. A list of politically exposed persons among owners is not specifically required for payable through account arrangements.
• B. The USA PATRIOT Act does not require providing a list of account holders who will use the payable through accounts.
• D. Anti-money laundering training records are not the specific information required under the payable through account provisions.

Correct answer: D

When deciding whether to maintain an account that would otherwise be closed due to AML concerns, the primary consideration is whether the institution can continue to meet its regulatory obligations with the account remaining open. The institution must balance law enforcement's investigative needs against its own compliance responsibilities. If maintaining the account would compromise the institution's ability to fulfill its regulatory duties or create unmanageable compliance risks, it cannot agree to the request.

Why the other options are wrong:

• A. Cost considerations should not drive compliance decisions; regulatory obligations supersede cost-benefit analysis.
• B. The number of previous suspicious transaction reports is relevant to assessing risk but is not the primary consideration for this specific decision.
• C. A good compliance history does not justify maintaining a relationship that creates unacceptable regulatory risk going forward.

Correct answer: C

When a bank's monitoring system identifies potentially suspicious patterns-small deposits followed by ATM withdrawals in a high-risk geographic location-the appropriate response is to initiate an investigation to understand the nature and purpose of the activity. This investigation determines whether the activity is legitimate or warrants further action such as filing a suspicious activity report. Blocking activity immediately without investigation may be premature, and simply waiting to see if activity continues delays necessary due diligence.

Why the other options are wrong:

• A. Blocking activity without investigation violates the customer's rights and may be premature without understanding the context.
• B. Filing a suspicious transaction report comes after investigation has established that suspicious activity likely occurred.
• D. Waiting for continued activity delays necessary compliance action and investigation that should begin immediately.

Correct answer: C

Anti-money laundering training must be tailored to the specific risks and business processes of each line of business. A credit card business has distinct transaction patterns, customer types, and risk profiles compared to traditional retail banking. Generic training covering general policies and regulations is insufficient because it does not address the unique vulnerabilities and AML concerns specific to credit card operations, such as card-not-present fraud, velocity patterns, and cross-border e-commerce transactions.

Why the other options are wrong:

• A. Existing training may cover general policies but does not address the specific risks inherent to credit card business operations.
• B. The delivery method (face-to-face vs. online) is not the determining factor; content tailored to the business is the requirement.
• D. While regulations apply across the organization, training must address how those regulations apply to the specific business unit's operations and risks.

Correct answer: B

Cash couriers physically transport funds across borders without creating formal financial records or audit trails that would be captured by banking systems. This method allows terrorist financiers to move money without detection by regulatory systems. Extortion is a financing source rather than a movement method; casa de cambio (informal currency exchange) creates some documentation; virtual currency, while difficult to track, does leave blockchain or exchange records that sophisticated analysts can follow.

Why the other options are wrong:

• A. Extortion is a method of obtaining funds, not a method of moving funds without an audit trail.
• C. Casa de cambio transactions may involve informal record-keeping but typically leave some documentation trail.
• D. Virtual currency transactions leave blockchain records or exchange documentation that can be analyzed and traced by regulators.

Correct answer: B

Governments and multinational bodies impose economic sanctions as a primary tool to enforce foreign policy objectives, influencing the behavior of other nations, regimes, or entities. While sanctions may address various underlying concerns-including terrorism, kleptocracy, or trade violations-the overarching purpose is the advancement of foreign policy goals. Sanctions are not primarily designed to prevent fraud in trade transactions, and while they may address terrorism, their broader application extends well beyond that single threat.

Why the other options are wrong:

• A. While sanctions may target kleptocratic regimes, impeding kleptocracy is not the primary stated rationale for sanctions programs.
• C. Sanctions are broader than combating imminent terrorist threats; they serve multiple foreign policy objectives.
• D. Preventing fraudulent trade transactions is not a primary purpose of government economic sanctions programs.

Correct answer: C

When compliance officers observe a change in customer behavior-such as customers sending the same amounts more frequently than their normal patterns-this warrants further investigation to determine whether the activity indicates structuring, a change in legitimate business circumstances, or other suspicious conduct. Investigation is necessary before taking action because the activity may have legitimate explanations (seasonal business cycles, new contracts, legitimate remittance needs). Suspicion alone is not sufficient to file a report or restrict customer services.

Why the other options are wrong:

• A. Filing a suspicious transaction report without investigation is premature and may be unfounded.
• B. Instructing tellers to refuse service without investigation violates customer rights and may constitute unlawful discrimination.
• D. Contacting customers directly about suspicious activity may alert them to detection and is not standard procedure; the institution should investigate independently first.

Correct answer: A

Undisclosed ownership of an LLC is a significant red flag for money laundering because it obscures the beneficial owner of funds and assets, preventing the bank from conducting proper customer due diligence and understanding the true source of funds. This opacity is fundamentally inconsistent with know-your-customer requirements and creates substantial compliance risk.

Why the other options are wrong:

• B. Collateral location in a different state is not inherently suspicious and does not indicate money laundering.
• C. Monthly overpayment of a loan is not structuring; structuring specifically involves deliberately breaking up transactions to avoid reporting thresholds, not paying more than required.
• D. An attorney being based outside the bank's lending area is irrelevant to money laundering indicators.

Correct answer: C

The Basel Customer Due Diligence paper emphasizes that correspondent accounts pose significant risk when the respondent bank lacks effective customer acceptance policies and know-your-customer procedures, as this creates gaps in the ability to identify and manage illicit activity flowing through the correspondent relationship.

Why the other options are wrong:

• A. Frequency of account use is not identified as a key risk factor in the Basel guidance.
• B. Service fee adequacy is a business consideration, not a compliance or money laundering risk.
• D. While transaction alignment with agreements is relevant, the primary concern in Basel guidance focuses on the respondent bank's own KYC effectiveness.

Correct answer: B

Law enforcement investigating an STR will request account opening documents and account statements because these materials are essential to understanding the customer's identity, background, account activity, and transaction patterns that led to the suspicious activity filing.

Why the other options are wrong:

• A. Previously filed STRs are internal compliance records that law enforcement may obtain through separate channels or subpoena, not standard investigative support documentation.
• C. Marketing materials are not relevant to investigating suspicious account activity.
• D. The institution's policies and procedures are not investigative documentation needed to understand the specific customer's suspicious activity.

Correct answer: A

An acquisition of another financial institution materially changes the bank's risk profile, customer base, products, geographic exposure, and operational structure, requiring an updated risk assessment to reflect these significant changes and ensure the AML program remains appropriate and effective.

Why the other options are wrong:

• B. Internal organizational name changes do not alter the bank's actual risk profile or require assessment updates.
• C. Streamlining cash handling procedures is an operational improvement that does not by itself require a risk assessment update.
• D. Time passage alone is not a triggering factor; risk assessments must be updated based on material changes in the institution's circumstances.

Correct answer: D

The Wolfsberg Principles for Private Banking require that new client approval involve at least one person other than the private banker to ensure independent review and oversight, preventing individual banker bias and maintaining proper control over relationship initiation.

Why the other options are wrong:

• A. Board-level approval is not required for all new private banking clients; oversight must exist but need not reach the board.
• B. Sole approval by the private banker alone violates the independence and oversight requirement.
• C. Requiring approval only from the private banker's supervisor is too narrow; the requirement is for approval by at least one other person, which could be various roles.

Correct answer: A

FATF-style regional bodies (FSRBs) support their member countries by providing technical assistance and capacity building to help implement FATF's 40 Recommendations and combat money laundering and terrorist financing through training, guidance, and best practice sharing.

Why the other options are wrong:

• B. FSRBs do not have enforcement authority to penalize member countries or entities; they provide guidance and technical support.
• C. FATF and regional bodies focus specifically on AML/CFT matters, not broader areas of concern.
• D. FSRBs provide guidance but do not directly supervise member country financial institutions; supervision remains a national responsibility.

Correct answer: C

A bank employee who willfully violates anti-money laundering laws faces criminal liability including investigation and potential imprisonment. While the financial institution may face enforcement actions and fines, the individual actor who knowingly and willfully violates AML statutes exposes themselves to criminal prosecution, which is the most serious regulatory consequence for an individual employee.

Why the other options are wrong:

• A. Investigation and reputational damage alone do not capture the severity of willful AML law violations for individuals.
• B. Fines and suspension apply to institutions; individuals face criminal penalties.
• D. This describes institutional enforcement actions, not individual criminal liability.

Correct answer: C

When law enforcement contacts a financial institution, the compliance officer should verify that the officer was an actual authorized representative before releasing any information or taking further action. This protects the institution from social engineering schemes and ensures compliance with proper legal procedures. Verification establishes legitimacy before any institutional response.

Why the other options are wrong:

• A. A suspicious transaction report is not appropriate for a law enforcement inquiry.
• B. The priority is verification of the officer's identity and authority, not follow-up on information already provided.
• D. While documentation is valuable, verification of the officer's legitimacy takes precedence.

Correct answer: B

A major economic consequence of money laundering through front companies is the weakening of the legitimate private sector. When illegitimate funds are injected into the economy through shell companies engaging in unfair pricing and competition, legitimate businesses cannot compete effectively. This distorts market pricing, reduces incentives for lawful commerce, and undermines economic stability.

Why the other options are wrong:

• A. Money laundering through front companies does not emphasize manufacturing.
• C. Front company laundering creates artificial pricing that harms competition rather than improving it.
• D. There is no alignment of management principles between criminal enterprises and legitimate businesses.

Correct answer: C

When a financial institution receives a request from law enforcement for suspicious transaction report documentation, it must confirm that the request originated from an actual authorized representative of the law enforcement agency. This verification step protects the institution from fraudulent requests and ensures information is released only to legitimate authorities.

Why the other options are wrong:

• A. Email is not an appropriate transmission method for sensitive STR documentation; secure channels must be used.
• B. The institution cannot notify the account holder when responding to law enforcement requests for STR-related documentation.
• D. The account holder's attorney does not receive copies of documentation provided to law enforcement in response to official requests.

Correct answer: B

When an auditor identifies a regulatory violation, regardless of prior approvals by internal parties, the violation must be included in the audit report and reported to appropriate governance bodies such as the board of directors. The auditor's responsibility is to ensure regulatory compliance is transparent to senior leadership, not to advise the compliance officer on exception handling or to recommend personnel actions. Consulting legal counsel may be prudent but does not satisfy the primary obligation to report the violation to the board.

Why the other options are wrong:

• A. Advising the compliance officer does not fulfill the auditor's obligation to report regulatory violations to the board.
• C. While legal consultation may occur internally, it does not satisfy the requirement to report the violation to the board.
• D. The auditor should report the violation but should not recommend specific disciplinary action against individuals; that is a governance decision.

Correct answer: A

When a politically exposed person requests changes to account beneficiaries, the appropriate mitigation is to perform due diligence on the proposed beneficiary to assess risk and ensure compliance with beneficial ownership requirements. This approach allows the transaction to proceed while properly managing risk. Declining all requests from PEPs is overly restrictive, and determining source of wealth is typically part of the initial due diligence process rather than the specific mitigation for adding a beneficiary.

Why the other options are wrong:

• B. While source of wealth determination is important in PEP relationships, the specific response to adding a beneficiary is to conduct due diligence on that beneficiary.
• C. Blanket rejection of requests from foreign PEPs is not compliant with AML guidance; enhanced due diligence on the beneficiary is the appropriate response.
• D. Automatically declining to add any beneficiary due to increased risk is an overly rigid approach that fails to properly assess and manage the specific risk.

Correct answer: C

The Fourth European Union Directive on money laundering includes requirements for member countries to maintain registries of beneficial owners of legal entities to increase transparency and prevent misuse of corporate structures for money laundering. Options A and B refer to specific due diligence measures that are principles but not specific directive requirements, and option D addresses sanctions policy outside the scope of the directive's obligations.

Why the other options are wrong:

• A. While PEPs are treated as higher risk under AML regimes, the specific requirement was not to declare them high risk for life.
• B. Enhanced due diligence on prepaid card holders is not a specific requirement of the Fourth Directive.
• D. The Fourth Directive does not include requirements for economic sanctions against non-cooperative jurisdictions; this relates to separate FATF coordination mechanisms.

Correct answer: B

A customer maintaining multiple bank accounts at several locations is a significant red flag for potential money laundering, as it suggests structuring activity designed to avoid detection and reporting thresholds. Regular cash deposits from a bakery business are consistent with normal retail operations, property insurance at twice the business value may reflect risk management preferences, and international wire transfers to family are routine personal transactions that do not inherently indicate illicit activity.

Why the other options are wrong:

• A. Regular cash deposits are expected for a bakery business and do not alone indicate money laundering.
• C. Purchasing property insurance at elevated values may reflect prudent risk management rather than suspicious activity.
• D. Wiring funds to family in a foreign jurisdiction is a routine personal transaction that does not inherently indicate money laundering.

Correct answer: C

Clients who are unwilling to provide their names to the bank represent a clear red flag for beneficial ownership concealment, which is a primary money laundering concern in real estate transactions. UK regulations and FATF guidance require identification of beneficial owners; clients deliberately avoiding this requirement strongly suggest illicit intent. Being foreign, having sufficient funds, and using corporate structures are not inherently problematic, but the refusal to disclose identities violates fundamental AML requirements.

Why the other options are wrong:

• A. Foreign clients are not automatically a red flag and require the same due diligence as domestic clients.
• B. Having sufficient funds to complete a legitimate purchase is expected and does not indicate suspicious activity.
• D. Using corporate entities for property purchases is a common and legitimate practice; the red flag is the refusal to identify beneficial owners.

Correct answer: A

The Egmont Group's key objective is to promote the development of Financial Intelligence Units (FIUs) globally and facilitate the sharing of expertise and best practices among member units. While the Egmont Group supports efforts to combat money laundering, issuing binding standards, and promoting information sharing, its primary mission focuses on fostering cooperation and development among FIUs rather than issuing binding standards or providing institutional best practices.

Why the other options are wrong:

• B. While aligned with broader AML goals, safeguarding the financial system is not the specific key objective of the Egmont Group itself.
• C. The Egmont Group does not issue binding standards; it promotes voluntary cooperation and information sharing among FIUs.
• D. Providing best practices for financial institutions' suspicious activity reporting is not the Egmont Group's primary focus; it centers on FIU-to-FIU cooperation.

Correct answer: C

The inability to verify the beneficial owners and the provision of only nominee owners represents the highest money laundering risk flag, as it indicates an attempt to obscure the true beneficial ownership of the business. Nominee structures are commonly used to conceal illicit ownership. While the expected activity involving cash, money orders, and remittances adds some risk context, the fundamental failure to identify beneficial owners- the core requirement of beneficial ownership due diligence-is the critical red flag that elevates money laundering risk.

Why the other options are wrong:

• A. Cash letters and money orders are business activities that, while requiring monitoring, do not alone indicate heightened risk.
• B. International remittance transfers are a normal business activity for many legitimate enterprises.
• D. Out-of-area addresses for account signers may reflect legitimate business practices and do not alone indicate heightened risk compared to beneficial ownership concealment.