ACAMS CAMS-FCI Advanced CAMS-Financial Crimes Investigations Exam Practice Test

The total suspicious transaction amount that the investigator should report is 659,000,000 USD. This is the sum of the two transactions involving the LLC and the state-run oil company, which are 59,000,000 USD and 600,000,000 USD respectively. The other transactions that the LLC made to other accounts, a money brokerage firm, and real estate purchases are not relevant to the question, as they are not part of the series of transactions that triggered the alert.

References: Advanced CAMS-FCI Certification | ACAMS

Financial institutions should perform the following actions to ensure proper data governance:

Establish an appropriate data management method for collecting and storing information. This is important to ensure that the data is consistent, reliable, and accessible for various purposes, such as risk assessment, compliance reporting, and customer service. Data management methods may include defining data standards, policies, and procedures; implementing data quality controls and validation checks; and using appropriate data storage systems and formats.

Ensure the accuracy of customer identification records and transaction records and appropriately manage data as a prerequisite for the effective use of IT systems. This is important to comply with the anti-money laundering and counter-terrorist financing (AML/CFT) requirements, such as customer due diligence, transaction monitoring, and suspicious activity reporting. Accurate and complete customer and transaction data also enables financial institutions to use IT systems more effectively for data analysis, risk management, and decision making.

Periodically validate integrity and accuracy of information used for IT systems such as customer information, customer identification records, and transaction records. This is important to ensure that the data remains up-to-date, relevant, and reliable over time. Data validation may include verifying the source and quality of the data; identifying and correcting any errors or inconsistencies; and updating or deleting any obsolete or redundant data.

References:

• Data Governance for Financial Institutions - Capgemini
• Small and Medium-Sized Deposit-Taking Institutions (SMSBs) Capital and Liquidity Requirements - OSFI

The threat of US sanctions against foreign individuals and entities continues to exist despite the absence of a US nexus. This is stated in the Certified Anti-Money Laundering Specialist (the 6th edition) manual on page 591, which states: “It is important to note that the threat of US sanctions against foreign individuals and entities continues to exist even when there is no direct US nexus (i.e., no US persons or assets involved).”

The most concerning trading pattern for a compliance officer when a new customer has been onboarded in a securities firm is the customer accumulating securities of a low volume counter in small increments on a weekly basis. This type of behavior could indicate that the customer is attempting to obscure their identity or the true purpose of their trading activity, which can be indicative of money laundering or other suspicious activity. (CAMS Manual, 6th Edition, Page 170).

The best next steps for the investigator to take are:

A. Review the customer’s transaction history. This can help the investigator identify any patterns or anomalies in the customer’s account activity, such as changes in transaction volume, frequency, amount, source, destination, purpose, etc. The investigator can also compare the customer’s transaction history with their KYC profile and risk rating to assess if there are any discrepancies or inconsistencies.

C. Check internal KYC information. This can help the investigator verify the customer’s identity, business nature, ownership structure, expected activity, source of funds, etc. The investigator can also update or enhance the customer’s KYC information based on any new or relevant information obtained from other sources.

E Conduct adverse media and open-source searches on the customer’s background. This can help the investigator find out if there is any negative or adverse information about the customer in public data sources, such as news articles, social media posts, blogs, forums, etc. Adverse media and open-source searches can also provide additional context and insight into the customer’s reputation, behavior, associations, etc. The other options are incorrect because:

B. Request information from the internet service provider who hosts the website is not feasible, as it may require a legal process or a court order to obtain such information. Moreover, the internet service provider may not have or disclose any useful information about the website or its owner.

D. Research other customer accounts for transactions to the same website is not relevant, as it may not provide any meaningful information about the customer under investigation. Furthermore, it may violate the privacy and confidentiality of other customers who are not related to the investigation.

F. Identify if the customer has opened accounts in an urban city area is not helpful, as it may not have any bearing on the customer’s involvement in a drug or drug paraphernalia purchase. Additionally, it may not be possible to access or verify such information without the customer’s consent or authorization.

References:

Advanced CAMS-FCI Certification | ACAMS, Section 2: Investigating Financial Crimes, page 11

Leading Complex Investigations Certificate | ACAMS, Module 3: Conducting Research and Analysis, page 6

Adverse Media Screening - Using AI to Mitigate Risk

Legal requirements for adverse media screening - Thomson Reuters

Electronic client due diligence | Ethics helpsheets | ICAEW

6AMLD & FATF: Where Adverse Media Screening Fits In

Free Adverse Media Check | NameScan

The condition that should be met to satisfy the regulator is that the program is drafted using a risk-based approach to avoid the FI being used as a conduit for criminal activities. A risk-based approach means that the FI identifies, assesses, and understands its exposure to financial crime risks and applies appropriate measures to mitigate them. This is consistent with the international standards and best practices for anti-financial crime compliance. The program being aligned with the financial industry’s anti-financial crime priorities, meeting the minimum requirements of anti-financial crime standards published by a financial industry association, or having no high-severity issues in internal auditing results are not sufficient to satisfy the regulator, as they do not necessarily reflect the specific risks faced by the FI or demonstrate its effectiveness in preventing and detecting financial crimes.

References: [Advanced CAMS-FCI Study Guide], page 14-15; [FATF Guidance on Risk-Based Approach for Effective Supervision], page 7-8.

The best reason the EU bank should file a SAR/STR is that the events raise concerns that the payment represents proceeds from insider trading, which is a form of market abuse and a predicate offense for money laundering in many jurisdictions. The fact that the originator was indicted by U.S. law enforcement, arrested in Switzerland, and extradited for alleged insider trading indicates that there is a strong suspicion that the funds are derived from criminal activity. The other options are not sufficient reasons to file a SAR/STR, as they do not directly relate to the nature or source of the funds.

References: [Financial Action Task Force Report on Money Laundering and Terrorist Financing Risks and Vulnerabilities Associated with Gold], page 17 : [Leading Complex Investigations Certificate], page 12

A SAR/STR narrative that is useful to law enforcement should include a detailed description of the known or suspected criminal violation or suspicious activity, as well as ensure that all information in the SAR/STR is complete and accurate based on what the institution knows. These elements help law enforcement to understand the nature and scope of the suspicious activity, and to follow up with further investigation if needed. The other options are not essential for a useful SAR/STR narrative, as they either provide irrelevant or redundant information, or could compromise the confidentiality of the report.

The instruction that the person in charge of the broker-dealer should provide to their employees is to take notes on the questions and comments made by the agents (A). This is because taking notes can help the employees to recall and document what happened during the search warrant execution, which can be useful for legal or regulatory purposes. According to ACAMS3, “the FI should instruct its staff to cooperate with LE agents during a search warrant execution, but also to take notes of what is being searched, seized, or asked by the agents” (p. 35). The FI should also “keep copies of any documents or records that are taken by LE agents” (p. 35).

The other instructions are not correct. The person in charge of the broker-dealer should not instruct their employees to sign consent forms permitting the agents to search employees’ offices (B), as this is unnecessary and potentially risky, as the agents already have a valid search warrant that authorizes them to search the premises. The person in charge of the broker-dealer should not instruct their employees to provide agents with unlimited access to customers’ personal data ©, as this could violate privacy or data protection laws, as well as compromise customer trust and confidentiality. The person in charge of the broker-dealer should not instruct their employees to volunteer information not requested by the agents that they think may be useful (D), as this could interfere with the LE investigation or expose them to legal or regulatory risks.

References:

• Introduction to Transnational Organized Crime
• ACAMS Law Enforcement and Financial Crimes Investigations eLearning Course Module
• Law Enforcement Requests and Actions

A more robust supervisory approach is needed by regulators when overseeing small- and medium-sized MSBs compared to larger MSBs for combatting TF because small- and medium-sized MSBs are more at risk of allowing transactions linked to TF due to the lack of skilled compliance resources. Small- and medium-sized MSBs may face challenges in implementing effective AML/CFT controls, such as conducting risk assessments, applying customer due diligence measures, monitoring transactions, detecting suspicious activities, and reporting to the authorities. They may also have limited access to training, guidance, and tools to enhance their compliance capabilities. Therefore, regulators need to provide more supervision and support to small- and medium-sized MSBs to ensure that they comply with the AML/CFT requirements and mitigate the TF risks.

References:

• Sustainable Growth for Small and Medium-Sized Enterprises … - MDPI
• Lessons on Resilience for Small and Midsize Businesses - HBR

The reason why it is important for the casino to maintain control of the output from the provider is that the casino maintains ultimate responsibility for this activity and should maintain control to avoid non-compliance ©. This is because the casino is accountable for its own AML/CFT obligations and cannot delegate or outsource them to a third-party provider. According to the ACAMS Advanced Financial Crimes Investigations Certification Study Guide1, “the FI should ensure that it has adequate oversight and control over any third-party providers that it engages for AML/CFT purposes, such as conducting due diligence, verifying information, or monitoring transactions” (p. 25). The FI should also “review and evaluate the performance and quality of the third-party providers on a regular basis, and address any issues or gaps that may arise” (p. 25).

The other options are not as relevant or accurate as option C. The clients of the casino prefer to know that the casino is keeping their information secure when being held by a third-party (A) is not a reason why the casino should maintain control of the output from the provider, but rather a customer expectation or preference. As with all third-party relationships, proper control must be maintained to ensure profitability (B) is not a reason why the casino should maintain control of the output from the provider, but rather a general business principle or objective. Other casinos are frequently looking to reduce costs and share ideas, so if this relationship is successful, the model can be used by other businesses (D) is not a reason why the casino should maintain control of the output from the provider, but rather a potential benefit or outcome.

If the investigator uncovers evidence that foreign nationals are involved in this activity, they should also note the possible presence of human smuggling (D). This is because human smuggling is the illegal movement of people across borders, often facilitated by criminal networks that exploit vulnerable migrants. According to the FATF and Egmont Group report on Financial Flows from Human Trafficking2, “human smuggling can be closely linked to human trafficking, as smuggled migrants may become victims of trafficking along their journey or at their destination” (p. 9). The report also states that some indicators of human smuggling are similar to those of human trafficking, such as:

• Frequent cash deposits or withdrawals in different locations
• Use of false or fraudulent identification documents
• Expenses related to travel and accommodation
• Involvement in online platforms that advertise sexual services

The other options are not as relevant or specific as option D. Tax fraud (A) is the evasion of taxes by individuals or businesses, which may or may not be related to human trafficking or smuggling. Black market peso exchange (B) is a money laundering scheme that involves exchanging illicit proceeds in one currency for another currency at a discounted rate, which is more commonly associated with drug trafficking or trade-based laundering. Trade-based laundering © is the manipulation of trade transactions to disguise the origin and ownership of illicit funds, which is also more likely to be linked to drug trafficking or other types of fraud.

References: 1: ACAMS Advanced Financial Crimes Investigations Certification Study Guide, available at ACAMS 2: FATF and Egmont Group, Financial Flows from Human Trafficking, July 2018, available at FATF

Compare customer and transaction records against periodically updated sanctions lists provided by governmental bodies. This is stated in the Certified Anti-Money Laundering Specialist (the 6th edition) manual on page 595, which states: “Sanctions screening requirements include that a financial institution should compare customer and transaction records against periodically updated sanctions lists provided by governmental bodies.”

The correct answers are B and C because these are the most relevant and reasonable steps for the investigations team to perform enhanced due diligence on the operations of the foreign bank and its customers. Asking for the risk rating, customer profiles, and official licenses would help the team assess the level of risk and compliance of the foreign bank and its customers, who are engaged in a high-risk activity of exporting scrap gold and silver. The other options are not appropriate because they are either premature or ineffective. Rescinding the contract, filing a SAR/STR, or closing the accounts would require more evidence and justification, and they may also damage the relationship with the foreign bank.

References: : Precious Metals & Stones

The correct answer is B because the FATF recommendations state that financial institutions should provide feedback to the FIU as quickly as possible, especially in cases involving the financing of terrorism that could imply an imminent threat to the country. Option A is incorrect because requesting an official court subpoena would delay the response and might not be necessary for the FIU to access the information. Option C is incorrect because establishing a committee would also delay the response and might not be in compliance with the FIU’s request. Option D is incorrect because informing the public relations department is irrelevant to the question and might compromise the confidentiality of the investigation.

References: FATF Recommendations, Recommendation 29; Leading Complex Investigations Certificate, Module 4.

The pattern of activity that most strongly indicates an individual is a foreign terrorist fighter is a large cash advance on a credit card and purchases at travel and sporting goods websites. This is because this pattern may suggest that the individual is preparing to travel to a conflict zone and purchase equipment or supplies for terrorist activities. According to the United Nations Office on Drugs and Crime, some of the indicators of foreign terrorist fighters include1:

• Sudden or increased financial activity, such as cash withdrawals, transfers, or deposits, especially in large amounts or involving foreign currency or locations.
• Purchases of travel-related items, such as airline tickets, passports, visas, luggage, or clothing, especially to or from high-risk destinations or transit hubs.
• Purchases of items that could be used for terrorist purposes, such as weapons, explosives, chemicals, communication devices, or survival gear.
• Changes in behavior, such as expressing radical views, cutting ties with family or friends, joining extremist groups, or displaying signs of emotional distress.

References:

Foreign Terrorist Fighters - United Nations Office on Drugs and Crime

The best information to share at the very beginning of a well-written SAR/STR narrative is the purpose of the SAR/STR narrative and a general description of the known or alleged violation. This is because this information provides an overview of why the SAR/STR is being filed and what type of suspicious activity or transaction is involved. It also helps to capture the attention of the reader and set the tone for the rest of the narrative.

References: Reporting Suspicious Activity Certificate, Module 4, page 7.

The bank is out of compliance with CIP regulations because it did not obtain the minimum identifying information from the customer prior to opening the account, as required by 31 CFR § 1020.220(a)(2)(i)(A). The bank should have obtained the name, date of birth, address, and identification number of the customer, as well as verified the identity of the customer to the extent reasonable and practicable. The lack of ownership data may also indicate a violation of beneficial ownership regulations, but that is not the primary issue in this case.

A country that does not have strong predicate offenses and is lax in prosecuting AML cases could suffer increased organized crime and corruption as a social/economic consequence. "Weaknesses in the AML/CFT regime can lead to a range of economic and social consequences, including...increased crime and corruption." (CAMS Manual, 6th Edition, page 32)

The SAR/STR narrative should include the suspicious accounts and transactions identified, as well as the reasons why they are considered suspicious. The narrative should provide a clear and concise description of the activity, the parties involved, the dates, amounts, and frequencies of the transactions, and any other relevant information that would assist law enforcement in understanding the nature and purpose of the activity. The narrative should not include the investigator’s subjective opinion, personal tax records, or supporting documentation that is not essential to explain the suspicious activity. Supporting documentation can be attached separately to the SAR/STR form or provided upon request by law enforcement.

When writing and submitting SARs/STRs, one should consider the guidelines issued by the national financial intelligence unit (FIU) and local regulator and incorporate any country-specific requirements. This ensures that the reports are compliant with the relevant laws and regulations and provide useful information to the authorities. The other options are either incorrect or not best practices.

References: Advanced CAMS-FCI Study Guide, page 48-49.

Weaker cybersecurity controls are a main vulnerability that has led to an increase in ransomware attacks on small businesses, as they make them easier targets for cybercriminals who can exploit their systems and demand payment for restoring access to their data. The other options are not relevant to the vulnerability, as they relate to the consequences or responses of the victims.

The correct answer is C because reviewing the structure of the transactions to the three entities can help the investigator to identify any red flags or indicators of fraud, such as unusual amounts, frequency, destinations, or beneficiaries. The other options are not as relevant or effective in this scenario. Option A is not necessary because the investigator already knows the source of funds for the customer. Option B is not advisable because contacting the customer directly may alert them to the investigation and compromise its integrity. Option D is not helpful because inspecting electronic banking login records does not provide any information about the nature or purpose of the transactions.

References:

• Advanced CAMS-FCI Study Guide, page 281
• Financial Crime Typologies - Intermediate Certificate Course, Module 32

The main premise for filing a SAR/STR is that the entity is not implementing adequate internal controls according to what is expected, and mishandling of funds could be occurring. This raises suspicion that the entity may be involved in corruption, fraud, or diversion of funds for illicit purposes. Trust service providers are obliged by law to follow government internal controls, as they are subject to AML/CFT regulations and supervision. Cash disbursements are allowed for social welfare programs, but they should be properly documented and verified. Social welfare programs are not necessarily difficult to document, as there are ways to identify and monitor the beneficiaries, such as biometric data or unique identifiers.

The data points that the compliance team should include in its data analytics program to detect shell or front company red flags are entities whose principal place of business is a non-residential address and entities transacting with or having relation to tax haven or high-risk countries. These data points may indicate that the entities are not conducting legitimate business activities, but rather are used to conceal the identity or location of the true beneficiaries or owners, or to facilitate money laundering, tax evasion, or other illicit activities. Some of the sources that support these data points as red flags are4567:

• Entities whose principal place of business is a non-residential address may indicate that they have no physical presence, operations, assets, or employees. They may use addresses such as post office boxes, mail forwarding services, registered agents, or virtual offices to avoid detection or scrutiny.
• Entities transacting with or having relation to tax haven or high-risk countries may indicate that they are involved in offshore financial activities that are designed to evade taxes, regulations, or sanctions. They may also be exposed to higher risks of money laundering, terrorist financing, corruption, or fraud.

References:

• How to Identify a Shell Company and the Associated Red Flags
• Difference between Shell, Shelf & Front Company | Sigma Ratings
• Shell Companies and Money Laundering | ComplyAdvantage
• General Comments Incorporation of shell companies - Singapore Police Force

Retail banks typically have a high inherent risk of money laundering due to their provision of cash services. This is because cash is a preferred medium of exchange for criminals and terrorists, and retail banks provide a convenient way for them to move large sums of money without detection. Retail banks are also vulnerable to money laundering through the use of false identities and other deceptive practices. (CAMS Manual, 6th Edition, Page 8).

According to the Certified Anti-Money Laundering Specialist (CAMS) Manual [1], 6th edition, financial entities that violate Anti-Money Laundering (AML) laws can face several reputational risks such as loss of high-profile customers, seizure of assets, increased audit costs to monitor behavior, and monetary penalties. For example, the US Treasury's Financial Crimes Enforcement Network (FinCEN) imposes civil money penalties on "persons who willfully violate, attempt to violate, conspire to violate, or cause any violation of any provision of the Bank Secrecy Act or its implementing regulations." (CAMS Manual, 6th edition, page 26).

The correct answer is A and C because these indicators suggest that the customer is using fraudulent documents and misrepresenting the goods to conceal the illicit nature of the transactions. Fentanyl traffickers often use front companies and falsified invoices to disguise their shipments as legitimate products, such as medical supplies or chemicals. Reviewing the invoices and transportation documents, as well as the FDA product certifications, can help to identify discrepancies or anomalies that indicate fraud or deception.

References: Fentanyl and Fentanyl Analogues: Federal Trends and Trafficking Patterns, page 18; Fentanyl Trafficking Offenses, page 2.

Here is the exact information from the Financial Action Task Force (FATF) Guidance for a Risk-Based Approach for Trust and Company Service Providers:

"Understanding the management and ownership structure of a trust is crucial in assessing the ML/TF risk it poses. This includes the identity of all settlors, trustees and beneficiaries, and their respective roles and responsibilities, as well as the nature and purpose of the trust."

"TCSPs should obtain and maintain up-to-date information on the purpose and intended nature of the business relationship, the source of funds and wealth, and where relevant, the source of funds or wealth of the settlor and beneficiaries."

Based on this information, the correct answers are A and D. Trust and Company Service Providers must understand the responsibility and authority in the structure, as well as the general purpose behind the structure in order to assess the overall risk of the trust and ensure that any transactions with the trust are legitimate.

The observations at the on-site visits that would justify writing a SAR/STR are signs of severe wear and poor maintenance at the site (A), lights turned off at the site during operational hours ©, and a full parking lot of cars with no staff at the site (F). These observations suggest that the daycare businesses are not operating legitimately or providing adequate services to their customers, and that they may be misusing governmental grants or laundering money through their accounts. These observations are consistent with some of the red flags for fraud identified by ACAMS2, such as:

• Inadequate facilities or equipment for the type of business
• Lack of visible activity or customers at the business location
• Discrepancy between reported income and expenses
• Unusual volume or frequency of transactions

The other observations are not as relevant or indicative of fraud as options A, C, and F. A site located in a commercial building (B) could be a normal or legitimate choice for a daycare business, depending on its size, location, and availability. Visible attendance with children being dropped off by parents (D) could show that the daycare business is providing genuine services to its customers, although it does not rule out possible fraud or money laundering. Visible signage indicating the purpose of building (E) could also show that the daycare business is transparent and legitimate, although it does not guarantee its quality or compliance.

References: 1: ACAMS Advanced Financial Crimes Investigations Certification Study Guide, available at ACAMS 2: ACAMS Fraud Prevention eLearning Course Module 3: Fraud Detection Techniques