AML COMPLIANCE PROGRAM Flashcards
An AML program should be?
An AML program should be risk based, and should be designed to mitigate the money laundering and terrorist financing risks the organization may encounter.
Risk based approach.
Governments around the world believe that the risk-based approach is preferable to a more prescriptive approach in the area of anti-money laundering and counter-terrorist financing because it is more:
Flexible — as money laundering and terrorist financing risks vary across jurisdictions, customers, products and delivery channels, and over time.
Effective — as companies are better equipped than legislators to effectively assess and mitigate the particular money laundering and terrorist financing risks they face.
Proportionate — because a risk-based approach promotes a common sense and intelligent approach to fighting money laundering and terrorist financing as opposed to a “check the box” approach. It also allows firms to minimize the adverse impact of anti-money laundering procedures on their low-risk customers.
Factors to determine risk?
The risks your organization faces depend on many factors, including the geographical regions involved, your customer types and the products and services offered.
Levels of risk are?
Prohibited — The company will not tolerate any dealings of any kind given the risk. Countries subject to economic sanctions or designated as state sponsors of terrorism, such as Sudan or Iran, are prime candidates for prohibited transactions. Prohibited customers would include shell banks.
High-Risk – The risks here are significant, but are not necessarily prohibited. To mitigate the heightened risk presented, the firm should apply more stringent controls to reduce the risk, such as conducting enhanced due diligence and more rigorous transaction monitoring. Countries that are noted for corruption or drug trafficking are generally deemed high risk. High- risk customers may include PEPs; high-risk products and services may include correspondent banking and private banking.
Medium-Risk — Medium risks are more than a low- or standard-risk of money laundering, and merit additional scrutiny, but do not rise to the level of high-risk.
Low- or Standard-Risk — This represents the baseline risk of money laundering; normal business rules apply. FATF member countries and domestic retail customers are frequently, but not always, considered to be standard- or low-risk.
Types of customers might be considered high-risk for money laundering?
Casinos, off-shore corporations and banks located in tax/banking havens,leather good stores, currency exchange houses,money remitters, check cashers,car,boat and plane dealerships, used-car and truck-dealers and machine parts manufacturers, travel agencies, brokers/dealers in securities, jewel, gem and precious metals dealers, import/export companies and cash-intensive businesses (restaurant, retail stores, parking).
Product or services as a risk?
Does a particular new or current product or service:
Enable significant volumes of transactions to occur rapidly?
Allow the customer to engage in transactions with minimal oversight by the institution?
Afford significant levels of anonymity to the users?
Have an especially high transaction or investment
value?
Allow payments to third parties?
Have unusual complexity?
Require government verification of customer eligibility?
Certain specific banking functions or products considered a high-risk.
Private banking Offshore international activity Deposit-taking facilities Wire transfer and cash-management functions Transactions in which the primary beneficiary is undisclosed Loan guarantee schemes Travelers checks Official bank checks Money orders Foreign exchange transactions Trade- financing transactions with unusual pricing features Payable Through Accounts (PTAs).
The elements of an AML program.
A system of internal policies, procedures and controls;
A designated compliance of officer with day-to-day
oversight over the AML program;
An ongoing employee training program; and
An independent audit function to test the AML program.
Internal AML policies and the standard AML operating procedures
Internal AML policies should be established or approved by higher management or the board of directors, and should set the tone for the organization while the standard AML operating procedures are often designed and drafted at a lower level.
Overall, policies and procedures should be in writing, and must be approved by appropriate levels of management. In general, institution-level policies should be approved by the board, while business unit procedures can be approved by business unit management.
An AML compliance program should include policies, procedures, and processes that:
Identify high-risk operations (products, services, customers, and geographic locations); provide for periodic updates to the institution’s risk profile; and provide for an AML compliance program tailored to manage risks.
Inform the board of directors (or a committee of
the board) and senior management of compliance initiatives, known compliance deficiencies, suspicious transaction reports led and corrective action taken.
Assign clear accountability to persons for performance of duties under the anti-money laundering program.
Provide for program continuity despite changes in management or employee composition or structure.
Meet all regulatory requirements and recommendations for anti-money laundering compliance.
Provide for periodic review as well as timely updates to implement changes in regulations. Generally, this should be done at least on an annual basis.
Implement risk-based CDD policies, procedures and processes.
Provide sufficient controls and monitoring systems for the timely detection and reporting of suspicious activity. (Institutions should consider centralizing their own review and report- ling functions.)
Provide for dual controls and segregation of duties. Employees who complete the reporting forms should not also be responsible for filing the reports or granting the exemptions.
Comply with all record keeping requirements, including retention and retrieval of records.
Provide sufficient controls and monitoring systems for the timely detection and reporting of activity, such as for large currency or large transaction reporting.
Provide for adequate supervision of employees who handle currency transactions, complete reports,
grant exemptions, monitor for suspicious activity, or engage in any other activity covered by the anti-money laundering laws, including implementing regulations.
Train employees to be aware of their responsibilities under anti-money laundering laws, regulations and internal policy guidelines.
Incorporate anti-money laundering compliance into the job descriptions and performance evaluations of appropriate personnel.
Develop and implement screening programs to ensure high standards when hiring employees. Implement sanctions for employees who consistently fail to perform in accordance with an AML framework.
Develop and implement program testing to assess the effectiveness of the program’s implementation and execution of its requirements. This is separate from the independent audit requirement, but serves a similar purpose — to assess the effectiveness of the program.
Compliance Officer
A person should be designated as the anti-money laundering compliance officer. This individual should be responsible for designing and implementing the program, making necessary changes and disseminating information about the program’s successes and failures to key staff members, constructing anti- money laundering-related content for staff training programs and staying current on legal and regulatory developments in the field.
Training
WHO TO TRAIN WHAT TO TRAIN ON HOW TO TRAIN WHEN TO TRAIN WHERE TO TRAIN
The first step in designing an effective training program is to identify the target audience. Most areas of the institution should receive AML training, and the target audience should include most employees. But each segment should be trained on topics and issues that are relevant to them.
Several basic matters should be factored that should be factored into AML training?
Several basic matters should be factored into AML training:
General information: background and history pertaining to money laundering controls, what money laundering and terrorist financing are, why the bad guys do it, and why stopping them is important;
Legal framework: how AML laws apply to institutions and their employees;
Penalties for anti-money laundering violations, including criminal and civil penalties, fines, jail terms, as well as internal sanctions, such as disciplinary action up to and including termination of employment;
How to react when faced with a suspicious client or transaction;
How to respond to customers who want to circumvent reporting requirements;
Internal policies, such as customer identification and verification procedures and CDD policies;
Audit
Putting your AML compliance program into motion is not enough. The program must be monitored and evaluated. Institutions should assess their anti-money laundering programs regularly to ensure their effectiveness and to look for new risk factors.
The audit must be independent (i.e., performed by people not involved with the organization’s AML compliance staff), and individuals conducting the audit should report directly to the board of directors or to a designated board committee composed primarily or completely of outside directors. Those performing the audit must be sufficiently qualified to ensure that their findings and conclusions are reliable.
Self-assessments or external audits.
Make sure any self-assessments or external audits are accompanied by a written report to management outlining who conducted the assessment, the methods used to assess the program, the results and any suggested changes. The assessments or audits to identify deficiencies may be performed by employees of the institution or business, but not by persons who administer the program.
Compliance culture: senior management’s role.
Ultimate responsibility for the AML compliance program rests with the board of directors. Members must set the tone from the top by openly voicing their commitment to the program, ensuring that their commitment flows through all service areas and lines of business, and holding responsible parties accountable for compliance.
The board’s role in AML compliance consists of reviewing and approving the overall AML program and ensuring that there is on-going oversight. That does not mean that board members are expected to become anti-money laundering experts themselves, or that they are responsible for day-to-day program management. Rather, it means that they should formally approve an institution’s AML compliance program and then make sure the program is adequately implemented and maintained by staff.
Senior management’s commitment to compliance.
Senior management must show its commitment to compliance by:
Establishing a strong compliance plan that is approved by the board of directors and is fully implemented.
Insisting that it be kept informed of compliance efforts, audit reports and any compliance failures, with corrective measures instituted.
Communicating compliance expectations to the institution personnel.
Including regulatory compliance within the job descriptions and job performance evaluations of institution personnel.
Implementing procedures, processes and controls to ensure compliance with the AML program.
Conditioning employment on regulatory compliance.
Customer Due Diligence and the main elements of a CDD program.
Many experts say that a sound Customer Due Diligence (CDD) program is the best way to prevent money laundering.
A sound CDD program should include these 7 elements:
Full identification of customer and business entities, including source of funds and wealth when appropriate.
Development of transaction and activity profiles of each customer’s anticipated activity.
Definition and acceptance of the customer in the context of specific products and services.
Assessment and grading of risks that the customer or the account present.
Account and transaction monitoring based on the risks presented.
Investigation and examination of unusual customer or account activity.
Documentation of findings.