Series 30 AML Requirements Sample Questions

Try 10 Series 30 AML Requirements sample questions with explanations, then continue with the full Securities Prep practice test.

Series 30 AML Requirements questions help you isolate one part of the NFA outline before returning to a mixed practice test. The questions below are original Securities Prep practice items aligned to this topic and are not copied from any exam sponsor.

Topic snapshot

ItemDetail
ExamNFA Series 30
Official topicPart 11 - Anti-Money Laundering Requirements
Blueprint weighting10%
Questions on this page10

Sample questions

Question 1

At an introducing broker branch, an AP opening a new futures account notes that the customer reports annual income of $68,000, but the initial funding arrives in three same-day wires from unrelated businesses and the customer quickly requests transfers to an overseas bank. The AP alerts the branch manager. What is the best next step?

  • A. Have the branch manager question the customer first and decide at the branch whether escalation is necessary.
  • B. Notify the customer that the account is under suspicious activity review before taking further action.
  • C. Document the red flags and escalate them promptly to the firm’s AML compliance officer for review.
  • D. Continue processing activity until another unusual transfer occurs, then send the file to operations.

Best answer: C

Explanation: The AML compliance officer must evaluate suspicious patterns under the firm’s AML program and determine the appropriate review, monitoring, and reporting response.

Front-line staff and branch supervisors are expected to spot and document red flags, but they are not the final AML decision-makers. The key next step is prompt escalation to the firm’s AML compliance officer, who applies the AML program consistently and determines what further review or action is required.

The core concept is escalation. In an AML program, APs and branch managers often detect suspicious facts first, but the AML compliance officer matters because that role is responsible for coordinating the firm’s response, assessing the activity in a broader context, and deciding what internal follow-up, monitoring, and possible reporting steps are appropriate.

Here, the pattern matters: funding from unrelated businesses, income that does not fit the activity, and requested overseas transfers. Those facts should be documented and sent promptly through the firm’s AML process. The branch should not try to resolve the issue alone, delay review until more activity occurs, or alert the customer to a suspicious activity review. The key takeaway is that detection may begin at the branch, but AML judgment and escalation control belong with the designated AML function.

  • Branch-level decision is incomplete because the branch should not decide on its own whether suspicious activity requires formal AML review.
  • Alerting the customer is improper because it can interfere with AML review and create a tipping-off risk.
  • Waiting for more activity is wrong because suspicious patterns should be escalated when identified, not after additional red flags accumulate.

Question 2

An IB branch uses the firm’s centralized AML program and electronic new-account system. During a branch review, the branch manager finds that two APs accepted customer deposits and forwarded account forms before required CIP information was consistently obtained, and branch staff give conflicting answers about when to escalate exceptions to the AML officer. Home office says it reviews new accounts overnight, but the branch is still opening accounts the same day. What is the single best supervisory response?

  • A. Suspend new account openings at the branch, escalate the breakdown, and require documented CIP training and procedures before resuming
  • B. Continue opening accounts and rely on overnight home-office AML review because the program is centralized
  • C. Permit accounts to open if the customer deposit has cleared, then collect any missing CIP information afterward
  • D. Keep opening accounts but require a senior AP to review CIP questions case by case until the next annual AML training

Best answer: A

Explanation: A branch cannot rely on centralized AML policies if local staff cannot execute CIP controls consistently, so the manager should stop the activity, escalate, and fix the control failure.

The problem is not the existence of central AML procedures; it is the branch’s inability to carry out CIP steps reliably before accounts are opened. A branch manager should treat that as a control failure, escalate it promptly, and stop the affected activity until staff can perform the required process consistently.

AML supervision depends on both written firmwide procedures and effective branch-level execution. Here, the branch has evidence that APs are accepting deposits and forwarding account paperwork before CIP is being handled consistently, while staff do not know when exceptions must be escalated. That means the branch’s control environment is not functioning, even if home office performs an overnight review.

The best response is to stop new account openings at that branch, notify the AML/compliance function, and require clear branch procedures and training before resuming. Centralization does not excuse local breakdowns in customer identification. A later home-office check or informal case-by-case help is not an adequate substitute when the branch is already processing accounts the same day. The key takeaway is that a branch manager must address an execution failure immediately, not merely rely on the existence of a firmwide AML program.

  • Centralized program is not enough when local staff cannot perform CIP correctly before accounts are opened.
  • Collect it later fails because missing CIP steps should not be deferred until after deposit clearance or initial activity.
  • Informal senior review is too weak when the branch has a demonstrated control breakdown that requires escalation and corrective action.
  • Annual training wait is inadequate because the problem is current and affects live account-opening activity now.

Question 3

A branch manager is reviewing a new corporate hedging account under the firm’s CIP exception policy. Based on the exhibit, which action is fully supported?

Exhibit:

Branch CIP exception review
Review date: April 18, 2026
Account opened: April 15, 2026
Customer: Horizon Ag LLC

Policy conditions for opening with a CIP exception:
- No customer funds may be accepted until all exception approvals are recorded
- Branch manager must document the reason for the exception
- Non-documentary verification must be completed
- AML officer approval must be recorded within 1 business day of account opening

File status:
- Reason documented: Yes
- Non-documentary verification: Completed
- Branch manager approval: Recorded April 15
- AML officer approval: Not recorded
- Customer deposit received: April 15
  • A. Escalate the file as out of policy because funding was accepted before all approvals were recorded and AML approval is overdue.
  • B. Request documentary verification only because the exhibit shows no control breach.
  • C. Allow the exception to stand because AML approval is still within the permitted time frame.
  • D. Treat the file as compliant because non-documentary verification was completed.

Best answer: A

Explanation: The exhibit shows both a prohibited early deposit and a missing AML officer approval beyond the stated 1-business-day deadline.

The firm’s policy sets specific conditions for handling a CIP exception, and the file misses two of them. Funds were accepted before all exception approvals were recorded, and the AML officer approval was still missing more than 1 business day after account opening.

This question tests whether a CIP exception is being handled within the firm’s own documented controls. The exhibit states that no customer funds may be accepted until all exception approvals are recorded, and it separately requires AML officer approval within 1 business day of account opening. Here, the branch accepted a customer deposit on April 15, the same day the account was opened, even though AML officer approval was never recorded. By the April 18 review date, that approval was also past due.

When an exception file violates stated approval and timing conditions, the branch manager should treat it as an out-of-policy exception and escalate it promptly. Completing non-documentary verification and documenting the reason help, but they do not cure a funding-control breach or a missed approval deadline.

  • Completed verification is not enough because the policy also requires all approvals before accepting funds.
  • Still timely misreads the exhibit; April 18 is more than 1 business day after April 15.
  • Only need documents ignores the actual control failures already shown in the file.

Question 4

A branch manager reviews an IB branch AML file after an AP reported that a new customer made three same-day cashier’s-check deposits just below the firm’s internal review threshold and then requested an immediate transfer of excess funds to an unrelated bank account.

Exhibit:

Customer CIP completed: Yes
AP exception memo: Unusual funding pattern and transfer request
Branch manager action: Account activity temporarily restricted
Customer contact note: Customer said it was for "cash management"
AML officer review: ______
Disposition / escalation log: None

Which missing item is the most serious deficiency in this file?

  • A. A second AP memo describing the customer’s trading strategy
  • B. A signed customer acknowledgment of the firm’s AML policy
  • C. Documented review and disposition by the designated AML compliance officer
  • D. A branch worksheet comparing the deposits to typical initial margin amounts

Best answer: C

Explanation: Front-line detection is not enough; the designated AML compliance officer must review, document, and decide the firm’s AML escalation and disposition.

The decisive gap is the absence of documented review by the designated AML compliance officer. APs and branch staff may spot red flags first, but the AML officer is responsible for evaluating suspicious activity, determining next steps, and ensuring the firm’s AML records show a clear disposition.

This scenario tests AML escalation and recordkeeping. The AP identified suspicious facts, and the branch manager took an interim control step by restricting activity, but the file still lacks the required control point: documented review by the firm’s designated AML compliance officer. That role matters because suspicious activity handling must be centralized, consistent, and documented under the firm’s AML program rather than left at the front line.

A sound file should show:

  • the red flag identified by staff,
  • escalation to the AML compliance officer,
  • the officer’s review and conclusion, and
  • the resulting disposition or further escalation.

Customer explanations or added branch analysis may be helpful, but they do not replace the AML officer’s responsibility to assess and document the firm’s response.

  • Customer acknowledgment is not the key AML control here; firms do not solve suspicious-activity review by getting a client to sign an AML-policy receipt.
  • More AP detail may help the file, but a second sales-practice note does not substitute for formal AML-officer review.
  • Deposit comparison worksheet could support the analysis, yet the decisive deficiency remains the missing AML-officer review and disposition record.

Question 5

A branch manager wants AML records that do more than prove an alert was retained. Which record would best support follow-up investigation and supervisory escalation of a suspicious pattern of third-party deposits into customer futures accounts?

  • A. A case file with the alert, review steps, supporting documents, disposition, and escalation notes
  • B. A monthly exception report archived without analyst comments
  • C. A training roster showing associated persons completed AML training
  • D. A customer risk profile updated annually from account-opening data

Best answer: A

Explanation: It documents what was detected, what was investigated, who reviewed it, and whether the matter was escalated.

AML recordkeeping is not just storing alerts; it must also support investigation and supervisory review. A documented case file shows the alert, the work performed, the evidence considered, and the escalation decision, which is what a branch manager needs to supervise suspicious activity handling.

The core AML control here is an investigation record that creates an audit trail from detection through resolution. If suspicious deposits are flagged, the branch should be able to show more than a saved exception report. It should be able to reconstruct what happened: the alert, the account activity reviewed, any supporting records, the analyst or supervisor’s conclusions, and whether the matter was escalated under the firm’s AML procedures. That kind of file supports both meaningful follow-up and supervisory accountability. By contrast, records that only show monitoring occurred, or that training and customer data exist, do not by themselves show that a suspicious pattern was actually investigated and escalated when appropriate.

  • Stored alert only fails because archiving an exception report without comments shows retention, not investigation or escalation.
  • Customer profile only helps with baseline risk assessment, but it does not document the firm’s response to a specific suspicious pattern.
  • Training evidence only supports AML program administration, not case-level follow-up on questionable deposits.

Question 6

A guaranteed IB branch must conduct an annual AML independent audit. At this branch, the operations supervisor performs CIP reviews, monitors unusual funding activity, and maintains AML exception logs. The branch manager proposes having that same supervisor complete the annual AML audit checklist because she knows the files best. Which action best aligns with a meaningful independent audit?

  • A. Have the branch manager approve the supervisor’s checklist and treat that approval as the audit.
  • B. Assign a qualified reviewer outside the branch’s AML function to test controls and report findings for remediation.
  • C. Keep the supervisor as auditor, but require a signed statement that the review was objective.
  • D. Rely on the clearing FCM’s generic AML attestation instead of a branch-specific review.

Best answer: B

Explanation: A meaningful AML audit requires independent testing by someone not responsible for the day-to-day AML work being reviewed.

The key issue is whether the AML audit is truly independent and substantive. Because the operations supervisor performs the AML control work, having her audit that same work is self-review, not meaningful independent testing.

An AML independent audit should do more than satisfy a formality. It must be performed by someone who is not responsible for the daily AML controls under review and who can objectively test whether the branch’s procedures actually work in practice. Here, the operations supervisor handles CIP, unusual-activity monitoring, and exception logs, so using her as the auditor would undermine independence.

A meaningful approach is to use a qualified reviewer from outside that AML function, such as home-office compliance or an external reviewer, to sample records, test exception handling, and report deficiencies to management that can require corrective action. Manager sign-off on a self-review does not fix the conflict, and a generic clearing-firm attestation does not test the branch’s own AML controls.

The takeaway is that independent audit means independent testing, not just internal familiarity or a completed checklist.

  • Objectivity certification fails because a signed statement does not eliminate self-review of the supervisor’s own AML work.
  • Manager sign-off fails because approving a checklist is not the same as independent testing of branch AML controls.
  • Clearing-firm reliance fails because a generic attestation does not evaluate this branch’s specific procedures, records, and escalation practices.

Question 7

An IB branch manager reviews the branch’s annual AML file. The document labeled “independent audit” was prepared by the branch operations supervisor who approves new accounts, reviews customer wires, and clears AML exception items. The memo states “no exceptions noted” but shows no sample testing, no interviews, and no follow-up items. What is the best next step?

  • A. Revise the written AML procedures first and defer a new audit until the next annual cycle.
  • B. Keep the review on file and ask the supervisor to add more detail to the memo.
  • C. Accept the review because no suspicious activity was identified during the period.
  • D. Escalate to AML compliance and arrange a documented review by a qualified person independent of the branch AML process.

Best answer: D

Explanation: The current review is not meaningfully independent or substantive, so the branch should replace it with real independent testing before relying on it.

An AML independent audit must be more than a year-end formality. Because the reviewer performs day-to-day AML controls and the memo shows no real testing, the branch manager should escalate the issue and obtain a documented review by someone independent of the AML function.

The core concept is that AML independent testing must be both independent and meaningful. A person who approves new accounts, reviews wires, and clears AML exceptions is part of the control process being tested, so that person cannot provide a credible independent audit of that same process. A one-page memo with no sample selection, no testing steps, and no findings is also a sign of a formal check-the-box review rather than substantive testing.

The proper sequence is to recognize the deficiency, escalate it to the firm’s AML/compliance function, and arrange prompt testing by a qualified reviewer who is independent of the branch AML activities. That review should document scope, testing performed, exceptions, and remediation. Simply expanding the memo or waiting until next year would leave the branch relying on a deficient audit record.

  • More detail, same reviewer fails because added narrative does not cure the lack of independence.
  • No suspicious activity found misses the point because independent audit quality is separate from whether alerts resulted in a SAR decision.
  • Update procedures first reverses the sequence; the branch must first address the deficient independent testing instead of deferring it to the next cycle.

Question 8

A branch manager of an introducing broker that clears through an FCM finds that two APs opened several new futures accounts with only partial CIP information. In four files, documentary or non-documentary verification is missing, yet the accounts were funded by wires from unrelated third parties and began trading immediately. The branch’s written AML procedures do not tell staff how to escalate CIP exceptions or third-party funding. What is the single best supervisory action?

  • A. Wait for the next independent AML test before making any branch-level changes
  • B. Immediately escalate to the AML officer, restrict affected accounts, and remediate branch procedures and training
  • C. Close only the third-party-funded accounts and leave the written procedures unchanged
  • D. Obtain the missing CIP items after opening and allow trading to continue during collection

Best answer: B

Explanation: This is best because it addresses both the immediate CIP/AML risk in the affected accounts and the underlying control failure at the branch.

The best response is the one that treats this as both an account-level AML problem and a branch-control failure. Missing CIP verification, immediate trading, and unrelated third-party funding require prompt escalation and restriction, not delayed cleanup.

When CIP execution is weak and AML internal controls are also weak, a branch manager should not treat the issue as routine paperwork. The facts show two separate problems: affected accounts may present elevated AML risk, and the branch’s written procedures failed to provide a workable escalation process. The best supervisory response is to escalate immediately to the firm’s AML compliance officer, restrict or closely control the affected accounts until CIP and funding reviews are completed, and promptly correct the branch procedures and staff training.

A sound response should do all of the following:

  • contain the immediate risk in the existing accounts
  • escalate the third-party funding and missing verification for AML review
  • fix the control gap so the problem does not continue

Simply collecting documents later or waiting for a future test misses the branch manager’s duty to act promptly when control weaknesses are already evident.

  • Post-opening cleanup fails because allowing trading to continue does not adequately address missing verification and suspicious funding.
  • Account-only fix fails because closing some accounts still leaves the branch with defective AML procedures and no escalation control.
  • Delayed review fails because independent testing is not a substitute for immediate supervisory intervention once weaknesses are found.

Question 9

A branch manager at an introducing broker reviews the following daily AML exception note for a customer account. Which action is most fully supported by the exhibit?

Exhibit: Branch AML exception note

Customer: Green Valley Logistics LLC
Stated purpose at opening: hedge diesel costs; expected 1-2 futures trades/month
Last 10 business days:
- No futures trades placed
- 6 third-party incoming wires, each just under the firm's review trigger
- Same-day outgoing wire requests to an unrelated foreign bank
AP note: "Will ask customer next time he calls"
CIP/KYC file: complete and current
  • A. Defer action because the CIP/KYC file is current.
  • B. Escalate immediately for AML investigation and document the review.
  • C. Approve the activity because no futures trades occurred.
  • D. Wait for the AP to question the customer later.

Best answer: B

Explanation: The exhibit shows active transactional red flags that require prompt AML escalation even though the onboarding file is complete and current.

Suspicious-activity detection depends on monitoring actual account behavior against the expected customer profile. Here, the wire pattern, lack of hedging activity, and delayed follow-up by the AP require prompt escalation and documentation by the branch manager.

The core AML concept is that a complete customer file does not replace ongoing supervisory monitoring. In this exhibit, the stated account purpose is hedging diesel costs, but the recent activity shows no futures trading, repeated third-party incoming wires just under the firm’s review trigger, and same-day outgoing wires to an unrelated foreign bank. That mismatch between expected use and actual transactions is exactly the kind of pattern that active branch monitoring is meant to detect.

A branch manager should not wait passively for the AP to ask questions later or assume the file is fine because CIP/KYC was completed at account opening. The proper supervisory response is to escalate promptly for AML review and document the exception handling. The exhibit supports escalation, not inaction or automatic approval.

  • Current file misconception A complete CIP/KYC file addresses onboarding identity procedures, not whether current transaction patterns are suspicious.
  • Delay misconception Waiting for the AP to ask later leaves unresolved red flags unreviewed and defeats active monitoring.
  • No-trading misconception The absence of futures trades does not justify approval; it increases the mismatch with the stated hedging purpose.

Question 10

An IB branch manager reviews a new individual futures account opened under the firm’s CIP exception policy for customers who cannot provide standard proof of residential address. The policy requires: a written reason documentary proof is unavailable, one independent non-documentary verification result, branch-manager approval before the first trade, and a notation that the account is on heightened monitoring until the exception is resolved.

Exhibit: File extract

Driver's license copy: Yes
Reason note: Customer uses a P.O. box; no utility bill available
Independent database address match: Yes
First trade entered: March 6
Branch-manager exception approval: March 7
Heightened monitoring code added: March 7

Which control is deficient?

  • A. The written reason is a branch note, not a customer affidavit.
  • B. The file shows only one independent database verification.
  • C. The monitoring entry lacks a detailed review schedule.
  • D. The branch-manager approval came after the first trade.

Best answer: D

Explanation: The stated policy requires branch-manager approval before trading begins, and the file shows approval dated after the first trade.

The decisive issue is failure to follow the firm’s own CIP exception sequence. The file contains the required reason note, one non-documentary verification result, and a heightened-monitoring notation, but supervisory approval was obtained only after the account had already traded.

When a firm allows a CIP exception, the branch manager must confirm that every required control is both documented and completed in the right order. In this file, the branch documented why standard proof of address was unavailable, obtained one independent non-documentary verification, and placed the account on heightened monitoring. The missing control is timely supervisory approval: the firm’s policy says approval must occur before the first trade, but the first trade was March 6 and approval was March 7. That makes the exception handling deficient even though other pieces of the file are present. The key takeaway is that an exception file fails if a required approval is late, not just if a document is missing.

  • Extra verification is not the issue because the stated policy requires one independent non-documentary verification, and the file has one.
  • Customer affidavit is not required because the policy asks for a written reason the documentary proof was unavailable, not a customer-signed statement.
  • More monitoring detail could improve the file, but the policy only requires that heightened monitoring be noted until the exception is resolved.

Continue with full practice

Use the NFA Series 30 Practice Test page for the full Securities Prep route, mixed-topic practice, timed mock exams, and web/mobile app access.

Free review resource

Use the Series 30 Cheat Sheet on SecuritiesMastery.com when you want a compact review before returning to the NFA Series 30 Practice Test page.

Revised on Friday, May 1, 2026