Anti-Money Laundering and KYC Flashcards

Question 1

What is money laundering in simple terms, and why is it a concern?

Accepted Answer

Money laundering is the process of disguising the origin of money gained through criminal activity so it appears legitimate. Criminals use it to hide the source of illicit profits. It matters because it allows crime to pay and lets criminal networks operate within the financial system.

Question 2

What are the three traditional stages of money laundering, and what happens in each?

Accepted Answer

The three traditional stages are placement, layering, and integration. Placement introduces criminal cash into the financial system, often through deposits. Layering moves funds through complex transactions to obscure their trail. Integration returns the apparently clean money to the economy as legitimate wealth or assets.

Question 3

Why is the placement stage often considered the most vulnerable point for detection?

Accepted Answer

Placement is often considered most vulnerable because cash is physically bulky and unusual deposits can stand out against a customer's normal pattern of activity. Once funds enter the system in a more disguised form, tracing them becomes harder. Institutions therefore monitor cash activity closely at that stage.

Question 4

What is the difference between money laundering and terrorist financing?

Accepted Answer

Money laundering hides the criminal origin of funds, while terrorist financing usually involves moving money, often from legitimate sources, to support terrorist activity. Terrorist financing may use lawful or unlawful money and focuses on how funds will be used. Both are monitored, but their patterns differ.

Question 5

What is a predicate offense in anti-money laundering law?

Accepted Answer

A predicate offense is the underlying criminal activity that generates the illicit proceeds later laundered. Examples commonly include fraud, drug trafficking, corruption, and tax crimes, though the list varies by jurisdiction. Without a predicate offense, there are no criminal proceeds to launder, so identifying it is central to investigations.

Question 6

Why do criminals need to launder money rather than simply spend illicit proceeds?

Accepted Answer

Criminals launder money because spending illicit proceeds openly would reveal their source and could lead to prosecution or seizure. Large unexplained wealth draws attention from investigators and tax authorities. Laundering allows criminals to enjoy and control funds while appearing to have lawful income. It also lets them reinvest profits in further crime.

Question 7

What is the role of the Financial Action Task Force in global anti-money laundering efforts?

Accepted Answer

The Financial Action Task Force is an intergovernmental body that sets international standards for combating money laundering and terrorist financing. Its recommendations guide national laws and supervision. It also evaluates countries through peer review and can publicly identify jurisdictions with strategic deficiencies.

Question 8

Why do international standards matter when money can move across borders so easily?

Accepted Answer

International standards matter because criminals exploit gaps between national systems, sending funds through jurisdictions with weak controls. Common rules help ensure that a transaction is scrutinized similarly regardless of location. Coordinated standards also support information sharing between regulators and help prevent countries from becoming safe havens.

Question 9

What is the difference between a regulator and a financial intelligence unit?

Accepted Answer

A regulator supervises financial institutions, sets compliance expectations, and can impose penalties for failures. A financial intelligence unit is a national agency that receives, analyzes, and disseminates suspicious activity reports to law enforcement. The two roles are complementary, with one focused on supervision and the other on intelligence analysis.

Question 10

What is the purpose of an institution's written anti-money laundering program?

Accepted Answer

A written anti-money laundering program sets out the policies, procedures, and internal controls a firm uses to detect and report suspicious activity. It usually names a compliance officer, provides staff training, and includes independent testing. The program translates legal obligations into daily operational practice.

Question 11

Why is senior management accountability important in an AML compliance framework?

Accepted Answer

Senior management accountability means leaders own the risk, approve the program, and provide adequate resources. Without visible commitment from the top, compliance staff may lack authority or budget to act. Clear accountability also sets a culture where unusual activity is escalated rather than ignored.

Question 12

What is a correspondent banking relationship and why does it carry elevated risk?

Accepted Answer

A correspondent banking relationship is an arrangement where one bank provides services to another bank, often to process payments in foreign currencies. It carries elevated risk because the correspondent may have limited visibility into the respondent's underlying customers. Banks therefore apply enhanced due diligence to these relationships.

Question 13

What is the role of a sanctions screening program within AML controls?

Accepted Answer

Sanctions screening checks customers, beneficial owners, counterparties, and transactions against government lists of restricted persons, entities, and countries. It is a distinct but related control to AML monitoring. A match may require blocking or rejecting a transaction and reporting it to the appropriate authority.

Question 14

What does a beneficial owner mean in regulatory terms?

Accepted Answer

A beneficial owner is the natural person who ultimately owns or controls a customer, or on whose behalf a transaction is conducted. Control may also arise through voting rights or management authority. Identifying beneficial owners prevents criminals from hiding behind companies or trusts.

Question 15

Why do regulators expect institutions to keep records of their AML decisions?

Accepted Answer

Records allow examiners and investigators to reconstruct what was known, what was reviewed, and why a decision was made. Documentation demonstrates that controls operate as designed rather than only on paper. Good records also support consistent treatment of customers and provide evidence if a decision is later challenged.

Question 16

How does a regulator's examination differ from an internal audit?

Accepted Answer

A regulatory examination is conducted by an external authority that assesses whether an institution meets legal requirements, and it can lead to enforcement action. An internal audit is performed by the institution's own independent function to evaluate control effectiveness and recommend improvements. Both provide assurance, but they serve different accountability lines.

Question 17

What is customer due diligence and why is it the foundation of KYC?

Accepted Answer

Customer due diligence is the process of identifying a customer, verifying that identity with reliable sources, and understanding the nature and purpose of the relationship. It forms the foundation of know your customer, the principle that institutions must know who they are dealing with. Without it, monitoring lacks a reliable baseline.

Question 18

What information is typically collected to identify an individual customer?

Accepted Answer

Institutions typically collect full legal name, date of birth, residential address, and an identification number such as a passport or national identity number. Some also record nationality, occupation, and contact details. The exact data required depends on the risk profile and on applicable local rules.

Question 19

What does verification mean, and how does it differ from simply collecting information?

Accepted Answer

Verification means confirming that collected information is accurate by checking it against reliable, independent sources, such as official documents or trusted databases. Collection simply records what the customer claims. Verification gives the institution assurance that the claimed identity actually corresponds to a real person or entity.

Question 20

When should simplified due diligence be considered instead of standard measures?

Accepted Answer

Simplified due diligence may apply where a customer or product is assessed as lower risk, such as certain low value accounts with limited functionality. It involves reduced verification and less frequent review, but it is never a waiver of identification. Institutions must still monitor for changes that would alter the risk assessment.

Question 21

What triggers enhanced due diligence for a higher-risk customer?

Accepted Answer

Enhanced due diligence applies when risk factors point to a heightened chance of money laundering or terrorist financing. Common triggers include politically exposed persons, customers from high-risk jurisdictions, complex ownership structures, and unusual or opaque transaction patterns. Enhanced measures may include deeper source of funds checks and senior approval.

Question 22

What is a politically exposed person and why does that status matter?

Accepted Answer

A politically exposed person is an individual who holds or has held a prominent public function, along with certain family members and close associates. The status matters because such individuals may be vulnerable to bribery and corruption, creating higher risk of laundering proceeds of public office. Status alone does not imply wrongdoing.

Question 23

What is ongoing customer due diligence, and why is it needed after onboarding?

Accepted Answer

Ongoing due diligence means periodically refreshing customer information and reviewing whether account activity still matches the expected profile. Customers' circumstances change, such as new business interests, new countries of activity, or changes in ownership. Without ongoing review, a customer who was low risk at onboarding may later present risks that go unnoticed.

Question 24

Why should institutions record the purpose and intended nature of a business relationship?

Accepted Answer

Documenting the purpose and intended nature of a relationship creates a baseline of expected behavior. Without it, staff cannot tell whether a transaction is unusual for that customer. For example, a retail business expected to receive regular card payments that suddenly moves large sums to unrelated jurisdictions presents a clear deviation worth examining.

Question 25

What does the risk-based approach mean in anti-money laundering?

Accepted Answer

The risk-based approach means directing controls and resources toward the areas where money laundering or terrorist financing risk is highest. Lower risk areas receive proportionate, lighter measures. It replaces a uniform checklist with judgment informed by evidence about customers, products, channels, and geographies.

Question 26

What are the main risk factors an institution should consider in its risk assessment?

Accepted Answer

Institutions commonly consider customer type, geographic exposure, products and services, and delivery channels. Customer risk includes ownership complexity and occupation, while geographic risk reflects jurisdictions with weak controls or high corruption exposure. Product risk covers features that enable anonymity or rapid transfers, and channel risk addresses non face to face onboarding.

Question 27

Why must an institution's risk assessment be documented and updated over time?

Accepted Answer

Documentation shows regulators how the institution identified and weighed risks, which is essential for demonstrating the program is reasonable. Risks change as products, customers, and threats evolve. An outdated assessment may leave controls focused on yesterday's exposures. Regular updates keep resources aligned with current risk.

Question 28

What is transaction monitoring and what does it aim to detect?

Accepted Answer

Transaction monitoring is the ongoing review of customer activity to identify transactions or patterns that are inconsistent with the customer's profile or known typologies of money laundering. It aims to detect unusual behavior that may warrant investigation. Monitoring can use automated rules, models, and analyst review, often in combination.

Question 29

What are common red flags that might indicate structuring of transactions?

Accepted Answer

Structuring is breaking up cash transactions into smaller amounts to avoid reporting thresholds. Red flags include repeated deposits just below a reporting limit, multiple transactions on the same day at different branches, and use of several people to make deposits. Staff should treat such patterns as grounds for review, not proof of intent.

Question 30

Why is alert triage important in a transaction monitoring system?

Accepted Answer

Alert triage is the process of reviewing system alerts to decide which ones warrant investigation and which can be closed. Monitoring systems often generate many false positives, so efficient triage protects analyst time. Clear documented reasons for closing alerts are essential, because regulators examine whether alerts were handled consistently.

Question 31

How does a risk-based approach affect the calibration of monitoring thresholds?

Accepted Answer

Higher risk segments typically warrant lower alert thresholds or more granular scenarios, so that smaller or subtler activity is reviewed. Lower risk segments can use broader parameters to reduce noise. Calibration should be tested and tuned periodically using historical alert outcomes, so thresholds reflect actual risk rather than arbitrary figures.

Question 32

What is model risk in automated monitoring and how can it be managed?

Accepted Answer

Model risk is the possibility that an automated monitoring tool performs poorly because of flawed design, bad data, or misapplied logic. It can miss genuine suspicious activity or generate excessive false alerts. Managing it involves validation before deployment, ongoing performance testing, documentation, and governance by people who understand the model's limits.

Question 33

What is a suspicious activity report and when is it typically filed?

Accepted Answer

A suspicious activity report is a filing made to the financial intelligence unit when an institution knows, suspects, or has reason to suspect that funds relate to criminal activity. It usually follows an internal review, and deadlines are set by local rules. Institutions must not tell the customer that a report was filed.

Question 34

What is tipping off and why is it prohibited?

Accepted Answer

Tipping off is disclosing to a customer or other unauthorized party that a suspicious report has been filed or that an investigation is underway. It is prohibited because such disclosure can alert criminals, allowing funds to be moved and evidence destroyed. Staff must handle information about reports on a need to know basis.

Question 35

Why should a decision not to file a suspicious report be documented?

Accepted Answer

Documenting a decision not to file shows that the institution reviewed the concern and reached a reasoned conclusion. Examiners often test whether unfiled alerts were investigated properly. A clear rationale, including the information reviewed and why it did not support suspicion, protects both the institution and its staff.

Question 36

What is the typical sequence of steps from an alert to a filing decision?

Accepted Answer

A typical sequence begins with an alert generated by monitoring or referred by staff. An analyst then gathers customer profile, transaction history, and related accounts to assess the activity. If the concern remains, the case is escalated for decision by a designated officer, who determines whether to file and records the rationale.

Question 37

How can a customer's sudden change in transaction behavior serve as an indicator of risk?

Accepted Answer

A sudden change in behavior can signal that an account is being used for purposes unrelated to the customer's stated activity. Examples include a dormant account suddenly receiving large inflows, or a personal account being used for frequent business style payments. Such shifts do not prove wrongdoing, but they warrant a documented explanation.

Question 38

Why is a case narrative important when investigating potentially suspicious activity?

Accepted Answer

A case narrative is a clear written account explaining what was observed, what was reviewed, and why the activity appears suspicious or not. It supports the filing decision and gives investigators a useful starting point. Good narratives are factual and avoid speculation.

Question 39

What is a typology in anti-money laundering and how is it used?

Accepted Answer

A typology is a documented pattern describing how criminals have carried out money laundering or terrorist financing. Examples include using trade invoices to move value, or routing funds through money mules. Institutions use typologies to design monitoring scenarios, train staff, and test whether controls would detect the described method.

Question 40

How should an institution respond after it receives a law enforcement request about a customer?

Accepted Answer

The institution should verify the legitimacy of the request and route it to the designated compliance or legal function. It should then determine whether a suspicious activity report is required, since a request alone is not automatically a reason to file. Staff must avoid disclosing the request to the customer.

Anti-Money Laundering and KYC Flashcards

1Foundations of Money Laundering

2Regulatory Frameworks and Institutions

3Customer Due Diligence Principles

4Risk-Based Approach and Monitoring

5Suspicious Activity Reporting and Cases

Learning Resources