ACAMS CAMS Quick Review
Quick review for CAMS candidates: AML/CFT risk-based controls, CDD/EDD, sanctions, investigations, reporting, governance, and common exam traps.
Quick Review for CAMS Candidates
This quick review is for candidates preparing for the ACAMS Certified Anti-Money Laundering Specialist (CAMS) exam, code CAMS, offered by ACAMS. Use it to refresh high-yield concepts before moving into topic drills, mock exams, and detailed explanations.
This page is independent review support. It is not affiliated with ACAMS and does not replace the official exam materials, current candidate guidance, or applicable laws and regulations in your jurisdiction.
High-Yield CAMS Review Map
| Area | What to know cold | Common exam trap |
|---|---|---|
| Money laundering process | Placement, layering, integration; purpose of each stage | Assuming every laundering scheme shows all three stages clearly |
| Terrorist financing | Funds may be legal or illegal; focus is support of terrorism | Treating terrorist financing as identical to profit-driven laundering |
| Risk-based approach | Higher risk gets stronger controls; lower risk may receive simplified controls where allowed | Believing risk-based means “ignore low risk” |
| Customer due diligence | Identify and verify customers; understand ownership, purpose, expected activity; monitor over time | Treating CDD as a one-time onboarding task |
| Enhanced due diligence | Applied to higher-risk customers, products, geographies, or behavior | Assuming EDD always means automatic account closure |
| Beneficial ownership | Identify natural persons who own or control legal entities or arrangements | Stopping at the company name or nominee |
| PEPs | Politically exposed persons require risk-sensitive review and controls | Assuming all PEPs are criminals or must be rejected |
| Sanctions screening | List screening, ownership/control issues, escalation, documentation | Confusing AML suspicious activity monitoring with sanctions screening |
| Transaction monitoring | Detect unusual activity compared with profile, peers, and known typologies | Filing solely because an alert fired without investigation |
| Suspicious activity reporting | Escalate, document rationale, preserve confidentiality, avoid tipping off | Telling the customer a report was or will be filed |
| AML governance | Board/senior management oversight, compliance function, training, independent testing | Thinking compliance alone “owns” all AML risk |
| Investigations | Gather facts, analyze context, decide, document, escalate/report as required | Ignoring negative findings because customer is profitable |
Core AML, CFT, and CPF Concepts
Money Laundering Stages
| Stage | Goal | Typical activity | Detection focus |
|---|---|---|---|
| Placement | Introduce illicit value into the financial system | Cash deposits, casino activity, money services, purchases of monetary instruments | Cash activity, structuring, unusual source of funds |
| Layering | Obscure origin, ownership, or audit trail | Multiple transfers, shell companies, cross-border movement, crypto hops, trade manipulation | Complex movement without clear business purpose |
| Integration | Reintroduce funds as apparently legitimate | Real estate, luxury goods, investments, loans, business revenue | Source of wealth, asset purchases, inconsistent income |
Exam point: Placement is often easiest to detect because cash enters regulated channels. Layering is often the most complex. Integration gives criminal proceeds an appearance of legitimacy.
Terrorist Financing vs. Money Laundering
| Concept | Money laundering | Terrorist financing |
|---|---|---|
| Primary objective | Conceal illegal origin and enjoy proceeds | Fund terrorist activity or organizations |
| Source of funds | Usually criminal proceeds | May be legal, illegal, or mixed |
| Transaction size | Can be large, complex, or structured | May involve small amounts |
| Detection challenge | Trace criminal proceeds | Identify purpose, network, destination, and behavior |
| Key controls | CDD, monitoring, reporting, law enforcement cooperation | CDD, sanctions, watchlists, monitoring, nonprofit/charity controls |
Trap: Terrorist financing can involve clean money moving for an illicit purpose. Do not focus only on criminal source.
Proliferation Financing
Proliferation financing involves providing funds or financial services connected to weapons proliferation, restricted goods, sanctioned actors, or prohibited procurement networks. High-yield clues include:
- Dual-use goods.
- Complex shipping routes.
- Front companies.
- Sanctioned jurisdictions or entities.
- Unusual trade documentation.
- Transshipment through high-risk locations.
- Payments inconsistent with the stated business.
The Risk-Based Approach
The risk-based approach is central to CAMS. Controls should be proportionate to risk.
Inherent Risk, Controls, and Residual Risk
| Term | Meaning | Example |
|---|---|---|
| Inherent risk | Risk before controls | Private banking for high-net-worth foreign clients |
| Controls | Measures used to reduce risk | CDD, EDD, screening, monitoring, training |
| Residual risk | Risk remaining after controls | Risk after the firm applies due diligence and monitoring |
A practical risk assessment asks:
- Who are the customers?
- Where are they located or transacting?
- What products and services are used?
- How are services delivered?
- What transaction types and volumes are expected?
- What controls exist?
- What residual risk remains?
Core Risk Categories
| Risk category | Higher-risk indicators | Control response |
|---|---|---|
| Customer | PEPs, shell companies, cash-intensive businesses, complex ownership, nonresident customers, high-net-worth clients, MSBs, charities/NPOs | EDD, ownership verification, source of funds/wealth review |
| Geography | Sanctions exposure, corruption, weak AML controls, secrecy jurisdictions, conflict zones, high-crime regions | Country risk scoring, enhanced review, sanctions controls |
| Product/service | Wire transfers, correspondent banking, trade finance, prepaid access, private banking, virtual assets | Product-specific monitoring and limits |
| Channel | Non-face-to-face onboarding, intermediaries, agents, digital-only activity | Strong identity verification, device/IP controls, agent oversight |
| Transaction | Unusual volume, structuring, rapid movement, round-dollar transfers, no business rationale | Alerts, investigation, escalation |
Risk-Based Does Not Mean
- Ignoring low-risk customers.
- Accepting all high-risk customers.
- Applying the same controls to everyone.
- Replacing judgment with a risk score.
- Treating documentation as optional.
It means the institution uses documented judgment to apply stronger or different controls where the risk is greater.
Customer Due Diligence Quick Review
CDD Objectives
CDD is designed to help the institution know who the customer is, who controls or benefits from the relationship, what activity is expected, and whether activity remains consistent with the customer profile.
| CDD component | Purpose | Candidate reminder |
|---|---|---|
| Identify the customer | Establish who is seeking the relationship | Includes individuals and legal entities |
| Verify identity | Use reliable information or documents | Requirements vary by jurisdiction and institution |
| Understand purpose and nature | Know why the account or service is needed | Expected activity supports monitoring |
| Identify beneficial owners | Look through legal entities to natural persons | Do not stop at nominees or shell entities |
| Ongoing monitoring | Compare actual behavior to expected behavior | CDD continues after onboarding |
| Update information | Refresh when risk or facts change | Triggered by events, reviews, or unusual activity |
Beneficial Ownership
Beneficial ownership focuses on the natural persons who ultimately own, control, or benefit from a legal entity or arrangement.
High-yield points:
- Legal ownership and beneficial ownership may differ.
- A nominee, trustee, or corporate director may not be the true controller.
- Complex structures can be legitimate but require understanding.
- Control may exist through ownership, voting rights, management authority, contractual control, or other influence.
- If ownership is opaque, the risk is higher and may require escalation.
Enhanced Due Diligence Triggers
EDD is commonly associated with:
- PEPs and close associates or family members.
- High-risk jurisdictions.
- Complex or opaque ownership.
- Unusual source of wealth or source of funds.
- High-risk products such as private banking, correspondent banking, trade finance, or virtual assets.
- Adverse media or criminal allegations.
- Activity inconsistent with the customer profile.
- Sanctions proximity or heightened geopolitical risk.
EDD may include:
- Senior management approval where required by policy or regulation.
- More detailed source of funds and source of wealth analysis.
- Additional identity, ownership, and control documentation.
- More frequent reviews.
- Lower thresholds for alerting.
- Review of public records, adverse media, litigation, or regulatory history.
- Clear documentation of rationale.
Source of Funds vs. Source of Wealth
| Concept | Meaning | Example question |
|---|---|---|
| Source of funds | Origin of the specific funds used in a transaction or account | Where did this wire deposit come from? |
| Source of wealth | How the customer accumulated overall wealth | How did this customer become wealthy? |
Trap: A bank statement may support source of funds, but it may not explain source of wealth.
PEPs, High-Risk Customers, and Special Customer Types
Politically Exposed Persons
A PEP is a person who holds or has held a prominent public function. Risk can also extend to close family members and close associates.
Key review points:
- PEP status is a risk factor, not proof of wrongdoing.
- Domestic, foreign, and international organization PEPs may be treated differently depending on law and policy.
- Risk depends on role, jurisdiction, access to public funds, corruption risk, products used, and transaction behavior.
- EDD often focuses on source of wealth, source of funds, expected activity, and ongoing monitoring.
High-Risk Customer Types
| Customer type | Why risk may be higher | Review focus |
|---|---|---|
| Cash-intensive business | Easier to mix illicit cash with legitimate receipts | Cash patterns, revenue reasonableness, tax/business records |
| Shell company | May obscure ownership or purpose | Beneficial ownership, business rationale, transaction purpose |
| Trust or legal arrangement | Control and benefit may be separated | Settlor, trustee, protector, beneficiaries, control powers |
| Money services business | High transaction volume, remittances, agents | Licensing/registration where applicable, agent oversight, monitoring |
| Nonprofit or charity | Potential diversion or abuse for terrorism financing | Purpose, beneficiaries, geography, governance, payments |
| Private banking client | High value, complex services, confidentiality expectations | Source of wealth, PEP/adverse media, complex structures |
| Correspondent banking customer | Indirect access to foreign bank customers | Respondent bank AML controls, payable-through risk |
| Virtual asset business | Speed, pseudonymity, cross-border movement | Wallet exposure, blockchain analytics, sanctions risk |
Sanctions and Screening
Sanctions compliance and AML monitoring are related but not the same.
| Topic | AML suspicious activity monitoring | Sanctions screening |
|---|---|---|
| Main question | Is activity suspicious or inconsistent? | Is there a prohibited or restricted party, country, vessel, good, or interest? |
| Timing | Often ongoing and post-transaction, depending on product | Often at onboarding and before/around transaction processing |
| Output | Alert, investigation, possible report | Hit disposition, block/reject/escalate per law and policy |
| Evidence | Customer profile, behavior, typologies | List match, ownership/control, identifiers |
| Main risk | Facilitating laundering or financial crime | Dealing with sanctioned parties or prohibited activity |
Screening Match Review
A screening match is not automatically a true hit. Review:
- Name similarity and aliases.
- Date of birth or incorporation.
- Address and nationality.
- Identification numbers.
- Ownership and control.
- Vessel, aircraft, wallet, or other identifiers.
- Transaction counterparties and intermediaries.
- Geographic links.
- Quality of data and transliteration issues.
Sanctions Evasion Red Flags
- Use of shell or front companies.
- Sudden changes in trade routes.
- Vague goods descriptions.
- Payments routed through unrelated third parties.
- Use of intermediaries in high-risk jurisdictions.
- Ownership changes shortly before transactions.
- Avoidance of obvious references in payment messages.
- IP, shipping, or documentation inconsistencies.
- Links to dual-use goods or restricted sectors.
Transaction Monitoring and Suspicious Activity
Unusual vs. Suspicious
| Term | Meaning | Required response |
|---|---|---|
| Unusual activity | Activity not expected for the customer or peer group | Review, investigate, seek explanation |
| Suspicious activity | Activity with facts suggesting possible money laundering, terrorism financing, sanctions evasion, fraud, or other crime | Escalate and report as required by law/policy |
Exam trap: An alert is not the same as suspicion. Alerts require investigation and disposition.
Investigation Workflow
flowchart TD
A[Alert, referral, subpoena, adverse media, or law enforcement request] --> B[Gather customer profile and expected activity]
B --> C[Review transaction details and counterparties]
C --> D[Compare activity to customer risk and known typologies]
D --> E{Reasonable explanation?}
E -->|Yes| F[Document rationale and close or monitor]
E -->|No or unresolved| G[Escalate to AML compliance / investigations]
G --> H{Suspicion threshold met under policy/law?}
H -->|Yes| I[File required report and maintain confidentiality]
H -->|No| J[Document no-file rationale and consider ongoing monitoring]
I --> K[Consider account restrictions, exit, or enhanced monitoring]
J --> K
Common Suspicious Activity Red Flags
| Pattern | Possible concern | Key context to check |
|---|---|---|
| Structuring/smurfing | Avoiding reporting or detection thresholds | Repeated cash activity below thresholds; related parties |
| Rapid in-and-out movement | Layering or pass-through activity | No business purpose; funds leave quickly |
| Round-dollar wires | Possible scripted or noncommercial transfers | Customer type and transaction history |
| Third-party payments | Concealed beneficial ownership or fraud | Relationship among parties |
| Unusual cash deposits | Placement of illicit proceeds | Business model and cash revenue |
| Dormant account reactivation | Account takeover or laundering | Customer contact, source of new funds |
| Multiple accounts with similar activity | Network behavior | Shared addresses, phones, IPs, signers |
| High-risk geography movement | Sanctions, corruption, trafficking, terrorism financing | Counterparty, goods, purpose |
| Inconsistent occupation/income | False profile or mule activity | Payroll, tax, employment, account use |
| Use of funnel accounts | Geographic layering | Deposits in many locations, withdrawals elsewhere |
Suspicious Activity Reporting Principles
Jurisdiction-specific requirements vary, but the exam commonly tests these principles:
- Escalate internally according to policy.
- Do not tip off the customer.
- File required reports when the applicable suspicion threshold is met.
- Document the facts, analysis, and decision.
- Keep reports and related information confidential.
- Continue monitoring if the relationship remains open.
- Consider whether account restrictions, exit, or enhanced controls are appropriate.
- Cooperate with competent authorities through approved legal and internal channels.
AML Program Governance
A sound AML program is not just software. It requires governance, accountability, controls, testing, and culture.
Core AML Program Elements
| Element | Purpose | What to remember |
|---|---|---|
| Board/senior management oversight | Set risk appetite and support compliance | Tone from the top matters |
| Policies and procedures | Translate law and risk appetite into operating rules | Must be practical and kept current |
| AML compliance officer/function | Coordinates program and escalation | Needs authority, independence, and resources |
| Risk assessment | Identifies and measures AML/CFT risk | Drives control design |
| CDD and EDD | Understand customers and risk | Ongoing, not one-time |
| Transaction monitoring | Detect unusual and suspicious activity | Scenarios must match risk |
| Sanctions screening | Prevent prohibited dealings | Requires quality data and escalation |
| Training | Helps staff detect and escalate issues | Role-based training is stronger |
| Independent testing/audit | Evaluates design and effectiveness | Should be independent of the process tested |
| Recordkeeping and reporting | Preserves evidence and regulatory compliance | Documentation is critical |
Three Lines of Defense
| Line | Typical role | AML example |
|---|---|---|
| First line | Owns and manages risk in the business | Relationship managers collect CDD and identify unusual activity |
| Second line | Oversight, policy, advisory, monitoring | AML compliance sets standards and reviews escalations |
| Third line | Independent assurance | Internal audit tests AML program effectiveness |
Trap: The first line cannot outsource all responsibility to compliance. Business units own the risk they generate.
Independent Testing
Independent testing should assess whether controls are designed well and operating effectively. It may review:
- Customer risk scoring.
- CDD and EDD files.
- Beneficial ownership documentation.
- Sanctions screening disposition.
- Transaction monitoring alert quality.
- Suspicious activity investigations.
- Reporting timeliness and quality, where applicable.
- Training completion and relevance.
- Governance and management information.
- Prior issue remediation.
International AML Standards and Bodies
FATF Concepts
The Financial Action Task Force, often referenced in AML study, is central to international AML/CFT/CPF standards.
| Concept | Why it matters |
|---|---|
| FATF Recommendations | Global framework for AML/CFT/CPF controls |
| Risk-based approach | Countries and institutions should identify, assess, and mitigate risk |
| Mutual evaluations | Assess national AML/CFT systems |
| High-risk and monitored jurisdictions | Affect geographic risk assessment |
| Beneficial ownership transparency | Helps prevent misuse of legal persons and arrangements |
| Targeted financial sanctions | Supports counter-terrorism and counter-proliferation controls |
| FIUs | Receive and analyze suspicious transaction/activity reports |
Other Commonly Tested Concepts
| Concept/body | Review point |
|---|---|
| Financial Intelligence Unit | National center for receiving and analyzing suspicious reports |
| Egmont Group | Network for cooperation among FIUs |
| Basel Committee | Banking supervision standards and risk management principles |
| Wolfsberg Group | Industry guidance, especially for correspondent banking and financial crime controls |
| UN sanctions | International sanctions measures implemented through national systems |
| Mutual legal assistance | Formal cooperation between jurisdictions in investigations |
| Regulatory supervision | Examiners assess program adequacy and compliance |
Correspondent Banking
Correspondent banking allows one financial institution to provide services to another, often across borders. It is high risk because the correspondent may have limited visibility into the respondent bank’s customers.
Key Risks
- Nested relationships.
- Payable-through accounts.
- Weak respondent AML controls.
- High-risk jurisdictions.
- Shell banks.
- Poor transparency over originators and beneficiaries.
- Sanctions exposure.
Due Diligence Focus
| Question | Why it matters |
|---|---|
| Who owns and controls the respondent bank? | Ownership may create sanctions, corruption, or secrecy risk |
| Where is it licensed and supervised? | Regulatory quality affects risk |
| What is its customer base? | Indirect exposure can be significant |
| What AML controls does it have? | Correspondent relies partly on respondent controls |
| Does it permit nested access? | Hidden third-party banks increase risk |
| Are payable-through services offered? | Customers may transact directly through correspondent account |
| What geographies and products are involved? | Drives EDD and monitoring |
Trap: A correspondent bank must understand the respondent relationship; it usually cannot identify every underlying customer in normal correspondent activity, but it must manage the risk appropriately.
Trade-Based Money Laundering
Trade-based money laundering uses trade transactions to move value and disguise proceeds.
Common TBML Methods
| Method | Description | Red flags |
|---|---|---|
| Over-invoicing | Price is inflated to move extra value | Price inconsistent with market |
| Under-invoicing | Price is reduced to shift value to buyer | Unusually low declared value |
| Multiple invoicing | Same goods invoiced multiple times | Duplicate documents or financing |
| Over/under-shipment | Quantity differs from documentation | Weight or volume mismatch |
| Phantom shipment | Documents show goods that were not shipped | No shipping evidence |
| Misdescription | Goods described falsely | Vague or inconsistent product detail |
| Third-party payments | Unrelated party pays or receives | No clear commercial rationale |
TBML Review Clues
- Goods inconsistent with customer business.
- Unusual shipping route.
- Inconsistent invoice, bill of lading, and payment data.
- Newly formed companies with high trade volume.
- Use of free trade zones without clear need.
- Dual-use goods or sanctioned-sector exposure.
- Repeated amendments to letters of credit.
- Payments from or to unrelated offshore entities.
Virtual Assets and Emerging Payment Risk
Virtual assets are high-yield because they combine speed, cross-border reach, pseudonymity, and evolving regulation.
Key Concepts
| Term | Review point |
|---|---|
| Virtual asset | Digital representation of value that can be transferred or used for payment/investment |
| VASP | Business providing virtual asset services, depending on local definitions |
| Wallet | Address or tool used to hold/send/receive virtual assets |
| Hosted wallet | Custodian controls or manages access |
| Unhosted wallet | User controls wallet directly |
| Blockchain analytics | Helps identify exposure to illicit wallets, mixers, darknet markets, sanctions, scams |
| Mixer/tumbler | Obscures transaction trail |
| Chain hopping | Moving value across different cryptoassets or blockchains |
Virtual Asset Red Flags
- Exposure to darknet markets, ransomware wallets, scams, or sanctioned wallets.
- Use of mixers or privacy-enhancing services without clear rationale.
- Rapid conversion from fiat to crypto and out again.
- Multiple wallets controlled by the same customer without business purpose.
- Activity inconsistent with customer age, occupation, or wealth.
- IP addresses, device data, or geolocation inconsistent with profile.
- Structuring deposits to buy virtual assets.
- Use of high-risk exchanges or weakly controlled platforms.
Investigation and Evidence Handling
Strong Investigation Habits
| Step | What good looks like |
|---|---|
| Define the issue | Identify why the alert or referral matters |
| Collect facts | Customer profile, account history, transaction details, counterparties |
| Analyze context | Compare activity to expected behavior and known typologies |
| Seek explanation | Use available records and approved customer contact procedures |
| Review negative information | Adverse media, sanctions proximity, law enforcement requests |
| Decide | Close, monitor, escalate, restrict, or report |
| Document | Facts, reasoning, evidence, decision-maker, date |
| Protect confidentiality | Limit access and avoid tipping off |
Quality Documentation
Good documentation answers:
- What happened?
- Why was it unusual?
- What facts were reviewed?
- What explanation was found?
- Why was the activity considered suspicious or not suspicious?
- Who approved the decision?
- What follow-up action is required?
Trap: A conclusion without reasoning is weak. “No suspicious activity found” is not enough unless the file explains why.
Common AML Typologies
| Typology | Typical indicators | Control focus |
|---|---|---|
| Drug trafficking proceeds | Cash deposits, structuring, funnel accounts, high-risk locations | Cash monitoring, geographic analysis |
| Human trafficking | Multiple hotel/transport payments, payroll anomalies, third-party control, unusual cash | Behavioral patterns, victim indicators |
| Corruption/bribery | PEP links, consulting fees, government contract payments, offshore entities | PEP EDD, source of wealth, third-party payments |
| Fraud/scams | Incoming victim payments, rapid withdrawals, mule accounts | Account behavior, complaints, law enforcement requests |
| Tax evasion | Offshore structures, undeclared income patterns, nominee ownership | Beneficial ownership and source of funds |
| Sanctions evasion | Front companies, trade route changes, vague payment messages | Screening, ownership/control, trade review |
| Terrorist financing | Small transfers, high-risk regions, NPO abuse, network links | CFT monitoring, sanctions, charity due diligence |
| Cybercrime/ransomware | Crypto flows, exchanges, mixers, darknet links | Blockchain analytics, VASP controls |
| Trade-based laundering | Invoice manipulation, unusual goods/routes, third-party payments | Trade document review and pricing checks |
Exam Decision Rules
Use these practical rules when answering scenario questions.
If the Scenario Shows a Red Flag
Do not jump straight to “file a report” unless the facts meet the suspicious reporting threshold in the scenario. The usual best answer is often:
- Investigate.
- Gather context.
- Compare to customer profile.
- Escalate internally if unresolved.
- File/report if suspicion is established under policy and law.
- Document the rationale.
If the Customer Is High Risk
High risk usually means apply EDD and monitoring, not automatic rejection. Exit or decline may be appropriate if:
- Identity or beneficial ownership cannot be verified.
- Activity lacks a lawful or reasonable purpose.
- Sanctions or prohibited exposure exists.
- Required information is refused.
- Risk exceeds the institution’s risk appetite.
- The institution cannot manage the risk.
If the Question Mentions Tipping Off
The safe principle is confidentiality. Staff should not tell the customer that a suspicious activity report has been or will be filed. Customer contact, if needed, should be handled carefully and according to policy.
If the Question Mentions Senior Management
Senior management and the board are responsible for oversight, risk appetite, resources, and culture. They do not usually perform day-to-day alert investigations, but they must ensure the program is effective.
If the Question Mentions Audit
Independent audit/testing evaluates the AML program. It should be independent from the activity being tested and should report findings for remediation.
If the Question Mentions “Best Next Step”
Look for the answer that is:
- Risk-based.
- Documented.
- Escalated through proper channels.
- Consistent with policy and law.
- Protective of confidentiality.
- Focused on facts rather than assumptions.
Common CAMS Candidate Mistakes
| Mistake | Better approach |
|---|---|
| Memorizing definitions without applying them | Practice scenario-based questions and explain the decision |
| Treating every red flag as proof of crime | Red flags require investigation and context |
| Confusing CDD, EDD, and monitoring | CDD identifies and understands; EDD deepens review; monitoring tests activity over time |
| Assuming PEPs must be rejected | PEPs require risk assessment and often EDD |
| Ignoring beneficial ownership | Always look for natural persons who own or control |
| Equating sanctions hits with AML alerts | Sanctions hits require list-match analysis and legal/policy action |
| Forgetting terrorist financing can use legal funds | Focus on destination, network, and purpose |
| Missing the role of documentation | A decision is only defensible if documented |
| Choosing “close account” too quickly | Investigate, escalate, and consider legal/reporting implications |
| Overlooking the first line of defense | Business units own customer and product risk |
Rapid Final Review Checklist
Before practice questions, make sure you can explain:
- The difference between placement, layering, and integration.
- Why terrorist financing can involve legitimate funds.
- How inherent risk, controls, and residual risk relate.
- The main components of a risk-based AML program.
- What CDD is designed to establish.
- When EDD is appropriate.
- How beneficial ownership differs from legal ownership.
- Why PEP status is a risk factor, not an accusation.
- The difference between unusual and suspicious activity.
- Why tipping off is prohibited or restricted.
- How sanctions screening differs from transaction monitoring.
- What makes correspondent banking higher risk.
- How trade-based money laundering manipulates value.
- How virtual assets can be used to layer funds.
- What good investigation documentation includes.
- How independent testing supports program effectiveness.
Practice-Ready Topic Drills
Use this quick review as a bridge into independent companion practice. For efficient review, drill these topics separately before taking full mock exams:
- AML/CFT fundamentals: stages, terrorist financing, proliferation financing.
- Risk-based approach: customer, geography, product, channel, transaction risk.
- CDD and EDD: beneficial ownership, PEPs, source of funds, source of wealth.
- Sanctions and screening: false positives, true hits, ownership/control, evasion.
- Monitoring and reporting: alerts, investigations, suspicious activity decisions.
- Governance: roles, policies, training, independent testing, three lines of defense.
- Typologies: trade-based laundering, virtual assets, corruption, trafficking, fraud.
- Scenario judgment: best next step, escalation, documentation, confidentiality.
For each missed question in your question bank, write down:
- The issue tested.
- The red flag or control concept.
- The decision rule you should have applied.
- Why the correct answer is better than the tempting answer.
Next Step
After reviewing this page, move into original practice questions by topic. Start with your weakest CAMS areas, read the detailed explanations carefully, then use mixed question-bank sets and mock exams to build exam-ready judgment.