CAMS: Understanding the Risks and Methods of Financial Crime

Use this page to isolate Understanding the Risks and Methods of Financial Crime before returning to mixed CAMS practice.

Topic snapshot

Sample questions

These questions are original Finance Prep practice items aligned to this topic area. They are designed for self-assessment and are not official exam questions.

Question 1

Topic: Understanding the Risks and Methods of Financial Crime

A retail customer has stable salary deposits and no unexplained cash activity. Over two months, the customer sends several small cross-border transfers to individuals in a conflict-affected region. One beneficiary is identified in credible adverse media as a fundraiser for a terrorist organization, but there is no evidence the customer’s funds are criminal proceeds. Which action is BEST?

• A. Take no action unless the beneficiary appears on a sanctions list.
• B. Escalate for potential CFT review because legitimate funds may still be used to finance terrorism.
• C. Treat the matter only as an AML layering concern and look for concealment of illicit proceeds.
• D. Close the alert because the source of funds appears to be legitimate salary income.

Best answer: B

What this tests: Understanding the Risks and Methods of Financial Crime

Explanation: AML focuses primarily on detecting and preventing the concealment or movement of proceeds from crime. CFT focuses on preventing funds or other assets from supporting terrorist actors or activities. In CFT cases, the money may come from lawful sources such as wages, donations, or business income. Here, the decisive facts are the transfers to a conflict-affected region and credible adverse media linking a beneficiary to terrorist fundraising. The absence of obvious criminal proceeds does not eliminate the need to escalate. The best response is to review and escalate the activity under CFT controls, while considering any sanctions, FIU reporting, or account action requirements under the institution’s procedures.

• Legitimate salary deposits do not rule out terrorist financing risk.
• Looking only for AML layering misses that CFT may involve lawful-source funds.
• Waiting for a sanctions-list match is too narrow when credible terrorist-financing indicators exist.

Terrorist financing risk turns on the intended support or destination of funds, not only on whether the funds come from criminal proceeds.

Question 2

Topic: Understanding the Risks and Methods of Financial Crime

A bank analyst reviews activity for a small labor-recruitment agency. The agency makes frequent cash deposits at several branches, sends wires to an overseas labor broker, and recent adverse media alleges its owners charged migrant workers illegal placement fees and withheld passports. What is the best action?

• A. Clear the activity because recruitment agencies commonly receive cash fees and pay overseas brokers.
• B. Escalate for investigation as potential laundering of forced-labor or human-trafficking proceeds, noting both institutional exposure and harm to exploited workers.
• C. Exit all recruitment-agency customers in the same corridor without further risk assessment.
• D. Treat the matter only as a customer-service fraud issue until affected workers file complaints with the bank.

Best answer: B

What this tests: Understanding the Risks and Methods of Financial Crime

Explanation: Financial-crime typologies often create two levels of impact: direct exposure for the institution and broader harm to society. Here, cash structuring-like behavior, wires to an overseas labor broker, and adverse media about illegal fees and passport withholding point to possible forced labor or human trafficking. The bank may be used to move proceeds or facilitate the scheme, creating AML, regulatory, legal, and reputational exposure. The underlying conduct also harms vulnerable workers and communities. The best response is risk-based escalation for investigation and potential reporting, not dismissal, narrow treatment as ordinary fraud, or blanket de-risking without review.

• Routine recruitment activity is not a sufficient explanation when adverse media and transaction patterns suggest exploitation.
• Waiting for worker complaints misses the institution’s duty to investigate suspicious indicators using available information.
• Blanket exit of a whole sector may avoid analysis and can conflict with a risk-based approach.

The facts indicate a predicate-crime typology that can expose the bank to AML, regulatory, and reputational risk while enabling serious societal harm.

Question 3

Topic: Understanding the Risks and Methods of Financial Crime

A private wealth client is introduced by a law firm. The ownership chart shows a discretionary trust owning a holding company, which owns several non-operating companies. Nominee directors sign documents, and the trust deed gives an undisclosed settlor power to replace trustees. Which beneficial ownership concern does this best illustrate?

• A. Simple corporate ownership where the registered directors are the beneficial owners
• B. Product risk arising mainly from high transaction volume in an operating business
• C. Routine delegation of administrative duties to a regulated professional adviser
• D. Obscured ultimate ownership or control through a trust, layered entities, and nominees

Best answer: D

What this tests: Understanding the Risks and Methods of Financial Crime

Explanation: Trusts, shell companies, nominee directors, and layered legal entities can be legitimate, but they are also commonly used to obscure who ultimately owns or controls assets. In this scenario, the concern is not merely that a law firm introduced the client or that directors sign documents. The key issue is that a discretionary trust, non-operating companies, nominee directors, and an undisclosed settlor with control powers make it difficult to identify the natural person exercising ultimate control. This is a beneficial ownership red flag requiring careful CDD or EDD focused on ownership, control, source of wealth, and purpose of the structure.

• Professional adviser involvement may be relevant, but it does not remove the institution’s responsibility to understand beneficial ownership.
• Registered directors are not necessarily beneficial owners, especially when they are nominees.
• High transaction volume may indicate product or activity risk, but the facts point to ownership and control opacity.

The structure creates uncertainty about the natural person who ultimately controls the assets or decisions.

Question 4

Topic: Understanding the Risks and Methods of Financial Crime

A bank is onboarding a newly formed company that requests only a basic business deposit account with online access and no credit products. The customer states it will broker precious metals purchases for third-party buyers, expects frequent payments from unrelated counterparties, and has no operating history. The product risk score is low because the account is simple. What is the best action?

• A. File a suspicious transaction report before onboarding because the sector alone establishes suspicion.
• B. Automatically reject the customer because precious metals activity is always outside risk appetite.
• C. Rate the customer risk higher and perform risk-based due diligence on sector exposure, counterparties, expected activity, and source of funds.
• D. Approve the customer as low risk because the requested account has low complexity and no lending exposure.

Best answer: C

What this tests: Understanding the Risks and Methods of Financial Crime

Explanation: A simple product does not make a customer low risk by itself. Customer risk also reflects the sector, expected transaction behavior, counterparties, jurisdictions, ownership, and available history. Precious metals brokering can present higher financial-crime risk because high-value goods and third-party payments may be used to move or store value. The best response is not automatic rejection or immediate reporting based only on sector, but a risk-based assessment that recognizes the elevated inherent risk and obtains enough information to understand whether the activity is legitimate and monitorable.

• Treating the account as low risk focuses only on product complexity and ignores customer and sector risk.
• Automatic rejection is blanket de-risking unless the firm’s stated risk appetite clearly prohibits the relationship.
• Filing a report before activity or additional facts confuses high inherent risk with a formed suspicion.

High-risk sector exposure can materially increase customer risk even when the product is simple.

Question 5

Topic: Understanding the Risks and Methods of Financial Crime

An international real estate firm is handling a luxury apartment purchase. The buyer is a newly formed offshore company with nominee directors, the purchase price will be paid from several unrelated third-party accounts, and the buyer is pushing to close within five days without a mortgage. What is the best AFC action?

• A. Delay review until after closing so transaction monitoring can identify any suspicious resale activity.
• B. Escalate for enhanced due diligence on beneficial ownership and source of funds before allowing the transaction to proceed.
• C. Treat the case as low risk because no mortgage lender is exposed to credit risk.
• D. Proceed because the transaction involves real property rather than a bank account or securities product.

Best answer: B

What this tests: Understanding the Risks and Methods of Financial Crime

Explanation: Real estate can be attractive for laundering because high-value property can absorb large amounts of illicit funds and may be purchased through complex legal structures. In this scenario, several red flags appear together: a newly formed offshore company, nominee directors that obscure control, unrelated third-party payments that obscure source of funds, and pressure for an unusually fast closing. The best action is not automatic refusal or passive monitoring, but escalation for enhanced due diligence before proceeding. EDD should clarify the beneficial owner, source of wealth and funds, purpose of the transaction, and whether the activity is consistent with the buyer profile.

• Real property transactions still create AFC risk, especially when ownership and funding are opaque.
• Lack of mortgage credit risk does not reduce money laundering risk; cash-like funding can increase it.
• Waiting until after closing may allow suspicious funds to be placed into a valuable asset before controls are applied.

The opaque ownership, third-party funding, and rapid cash-like closing are real-estate money laundering red flags requiring EDD and escalation.

Question 6

Topic: Understanding the Risks and Methods of Financial Crime

An investigation note says a government procurement officer accepted secret payments from a supplier in exchange for awarding public contracts. The officer then moved the payments through relatives’ accounts. Which predicate crime most directly generated the funds that may need laundering?

• A. Sanctions evasion
• B. Bribery and corruption
• C. Terrorist financing
• D. Market manipulation

Best answer: B

What this tests: Understanding the Risks and Methods of Financial Crime

Explanation: A predicate crime is an underlying offense that produces illicit proceeds that criminals may try to place, layer, or integrate through the financial system. In this scenario, the illicit funds arise from a government official accepting secret payments to influence contract awards. That conduct maps most directly to bribery and corruption, a common predicate crime for money laundering. The subsequent movement of funds through relatives’ accounts is laundering behavior, but the source of the proceeds is the corrupt payment scheme.

• Sanctions evasion involves avoiding restrictions on designated parties, countries, goods, or services; no sanctions restriction is described.
• Terrorist financing concerns raising or moving value to support terrorism; the scenario focuses on personal kickbacks.
• Market manipulation involves deceptive conduct affecting securities or market prices; no trading or market activity is described.

Secret payments to a public official in exchange for contract awards are bribery and corruption proceeds.

Question 7

Topic: Understanding the Risks and Methods of Financial Crime

A VASP investigator reviews a new customer’s activity: virtual assets are received from an external wallet, split into several smaller transfers, routed through multiple self-hosted wallets and a mixing service, converted into a privacy-enhanced coin, and then returned to an exchange account within the same day. Which typology indicator best matches this activity?

• A. Layering through rapid movement, mixers, and privacy features
• B. Customer identity fraud using stolen documents at onboarding
• C. Placement through cash-intensive fiat deposits into a virtual-asset account
• D. Sanctions screening false positive caused by name-matching similarity

Best answer: A

What this tests: Understanding the Risks and Methods of Financial Crime

Explanation: In virtual-asset activity, rapid movement across wallets, splitting funds, use of mixers or tumblers, and conversion into privacy-enhanced coins are classic layering indicators. The purpose is typically to break the transaction trail, reduce traceability on the blockchain, and make it harder to connect source and destination funds. The stem does not describe cash entering the financial system, a screening match, or false identity documents. It describes post-receipt movement designed to obscure provenance, which is most closely associated with layering in a VASP or cryptoasset context.

• Cash-intensive fiat deposits describe placement, but the stem starts with virtual assets already received from an external wallet.
• A sanctions screening false positive concerns name or list-matching resolution, not wallet routing, mixers, or privacy coins.
• Identity fraud at onboarding would involve false or stolen KYC information, which is not the described behavior.

The pattern uses speed, wallet hopping, mixing, and privacy-enhanced assets to obscure the origin and trail of funds.

Question 8

Topic: Understanding the Risks and Methods of Financial Crime

A bank is onboarding a real estate settlement company that will maintain an operating account and a client-funds account. The company is not a financial institution, but it receives large wires from unrelated buyers, including offshore legal entities, and quickly disburses funds to sellers after property closings. The relationship manager argues the customer should be treated as low risk because it is a non-financial business. What is the best AFC action?

• A. Rely on the company’s business license and screen only its directors because the underlying property parties are not the bank’s direct customers.
• B. Escalate for risk-based EDD and tailored monitoring because the customer handles high-value third-party funds that can obscure source of funds and beneficial ownership.
• C. Approve with standard CDD because intermediary risk applies only to banks, money transmitters, and other financial institutions.
• D. Reject the relationship automatically because all real estate-related customers are outside acceptable risk appetite.

Best answer: B

What this tests: Understanding the Risks and Methods of Financial Crime

Explanation: Non-financial sectors can still expose financial institutions to significant AFC risk when they handle cash, high-value assets, third-party funds, or opaque ownership structures. Real estate settlement activity may allow illicit proceeds to be placed, layered, or integrated through property purchases and rapid fund movements. The customer’s non-financial status does not make the relationship low risk. A risk-based response is to understand the business model, the nature and expected flow of client funds, relevant ownership and control, source-of-funds risks, jurisdictions involved, and to set monitoring for unusual third-party or pass-through activity.

• Standard CDD alone misses the decisive facts: high-value third-party wires, offshore entities, and rapid disbursements.
• Automatic rejection is not risk-based; the issue is elevated risk requiring assessment and controls, not blanket de-risking.
• A business license and director screening do not address how client funds may be used to move or disguise illicit proceeds.

Real estate intermediaries can create material AFC risk for the bank by moving high-value third-party funds through the bank’s accounts.

Question 9

Topic: Understanding the Risks and Methods of Financial Crime

A bank is updating the risk assessment for an e-commerce merchant. Most account credits are pooled settlements from payment service providers, and the bank can see the PSP names but not the individual buyers, funding sources, or buyer jurisdictions behind the payments. Which concept best matches this risk factor?

• A. Trade-based money laundering through mispriced goods
• B. Cash-intensive business risk from physical currency deposits
• C. Third-party payment-flow opacity affecting customer risk
• D. Sanctions-screening false positives from name similarity

Best answer: C

What this tests: Understanding the Risks and Methods of Financial Crime

Explanation: In MSB, PSP, and e-commerce contexts, third-party payment flows can make it harder for a financial institution to understand who is actually funding transactions. When settlements arrive from PSPs or aggregators, the visible counterparty may be the intermediary rather than the underlying buyers, wallets, cards, or jurisdictions. This opacity does not automatically prove suspicious activity, but it is a risk factor because it can limit transparency over source of funds, geographic exposure, and customer behavior. The bank should reflect that opacity in the merchant’s risk assessment and consider proportionate due diligence or monitoring controls.

• Physical currency deposit risk is not the issue because the stem describes electronic pooled settlements, not cash activity.
• Mispriced goods would point to trade-based money laundering, but the decisive fact here is hidden payment originator information.
• Name-similarity false positives relate to screening match quality, not opacity in third-party payment flows.

Pooled PSP settlements can obscure the underlying originators and payment sources, which should be considered in the merchant’s customer risk assessment.

Question 10

Topic: Understanding the Risks and Methods of Financial Crime

An AFC analyst reviews an alert involving a small business account opened online three weeks ago. The account holder emailed a corporate customer using a look-alike domain and a forged invoice, causing the customer to send $85,000. The funds were then transferred to another domestic account, and there is no evidence that the payment came from a prior criminal enterprise. What is the best initial interpretation for case handling?

• A. Close the alert as a civil billing dispute because the payment was sent through normal banking channels.
• B. Treat the primary issue as suspected fraud and escalate under fraud/AFC procedures, while assessing any subsequent movement of proceeds for AML reporting.
• C. Handle the matter as a sanctions screening issue because the payee used a look-alike domain.
• D. Classify the matter primarily as money laundering because any transfer after receipt is movement of illicit funds.

Best answer: B

What this tests: Understanding the Risks and Methods of Financial Crime

Explanation: Fraud involves deception, false representation, or manipulation to obtain money, property, or another benefit from a victim. Money laundering focuses on the placement, layering, or integration of proceeds from criminal activity, often involving concealment of source, ownership, or control. In this scenario, the key facts are the forged invoice and look-alike domain used to induce payment, which point first to suspected fraud, such as business email compromise or invoice fraud. The later transfer of funds may be relevant to an AML investigation because fraud proceeds can be laundered, but the initial classification should not ignore the deception used to obtain value.

• Classifying the matter as money laundering solely because funds moved overstates the transfer fact and misses the initial deception.
• Closing it as a billing dispute ignores the forged invoice and impersonation indicators.
• Treating it as sanctions screening is unsupported because no sanctions list match or prohibited party fact is provided.

The decisive fact is deception used to obtain the victim’s funds; later transfers may create AML concerns but do not change the primary fraud typology.

Continue with full practice

Use the CAMS Practice Test page for the full Finance Prep practice bank, mixed-topic practice, timed mock exams, and explanations.

Related focused pages

• Free CAMS Full-Length Practice Exam
• CAMS: Global AFC Frameworks, Governance, and Regulations
• CAMS: Building an Anti-Financial Crime Compliance Program
• CAMS: Tools and Technologies to Fight Financial Crime

Free review resource

Use the full Finance Prep practice page above for the latest review links and practice page.