CAMS-FCI Flashcards
Which main vulnerability has led to an increase in the ransomware attacks perpetuated on small businesses?
Weaker cybersecurity controls
The investigative department of a financial institution (Fl) receives an internal escalation notice from the remittance department for a SWIFT message requesting a refund due to potential fraud. The notice indicates that a total of three international incoming remittances were transferred to a corporate customer from Country A, in the amount of approximately 5 million EUR for each. The first two incoming remittances had been exchanged into currency B and transferred out to Country B a few days ago. The third incoming remittance has been
held by the remittance department.
As noted from the KYC profile, the corporate customer is working in the wood industry. with
the last account review completed 3 months ago. Since the account’s opening. there has been no history of a large amount of funds flowing through the account. The investigator conducts an Internet search and finds that the remitter is a food beverage company. The same morning, the investigator receives a call from a financial intelligence unit (FIU)
inquiring about the same incident. The FIU states that it will issue a warrant to freeze the account on the same day. After further review, the decision is made that transactions appear suspicious. Which are the next steps the investigator should take?
Provide additional information to the LE upon receiving a formal request.
Gather all the information that would be useful for law enforcement (LE) and recommend filing a SAR/STR
A bank’s transaction surveillance system triggers an alert for a deposit of 250.000 USO into a client’s account. According to the bank’s KYC information, the client works for a financial advisory firm, and earns approximately 100,000 USD per year. Which actions should be taken?
Request information and documentation from the client on the background of the transaction.
Contact the client advisor to learn if he has any insight on the transaction background.
Review the transaction background in the bank’s transaction platform.
During onboarding al Private Bank A, client C indicated that the account would be initially funded with a transfer from Bank B totaling 50 million USD. On which source of funds should Bank A conduct additional scrutiny?
Third-party transfer
Transfer from Bank B
An analyst reviews an alert for high volume Automated Clearing House (ACH) activity in an account. The analyst’s initial research finds the account is for a commercial daycare account that receives high volumes of large government-funded ACH transactions to support the programs. The account activity consists of checks (cheques) made payable to individual names in varying dollar amounts. One check indicates rent to another business.
An Internet search finds that the daycare company owner has previous government-issued violations for safety and classroom size needs, such as not having enough chairs and tables per enrollee. These violations were issued to a different daycare name. Simultaneous to this investigation, another analyst sends an email about negative news articles referencing local child/adult daycare companies misusing governmental grants. This prompts the financial institution (Fl) to search all businesses for names containing daycare’ or care. Text searches return a number of facilities as customers at the Fl and detects that three of these businesses have a similar transaction flow of high volume government ACH funding with little to no daycare expenses.
The analyst determines that site visits should be conducted for the three daycare businesses.
Which observations at the on-site visits would justify writing a SAR/STR?
Signs of severe wear and poor maintenance at the site
Lights turned off at the site during operational hours
A full parking lot of cars with no staff at the site
A financial institution FI might use which option as intelligence to file a SAR/STR?
The Fl is unable to obtain evidence of required licensing or registration despite suspicion of money transmitting.
An analyst reviews an alert for high volume Automated Clearing House (ACH) activity in an account. The analyst’s initial research finds the account is for a commercial daycare account that receives high volumes of large government-funded ACH transactions to support the programs. The account activity consists of checks (cheques) made payable to individual names in varying dollar amounts. One check indicates rent to another business.
An Internet search finds that the daycare company owner has previous government-issued violations for safety and classroom size needs, such as not having enough chairs and tables per enrollee. These violations were issued to a different daycare name. Simultaneous to this investigation, another analyst sends an email about negative news articles referencing local child/adult daycare companies misusing governmental grants. This prompts the financial institution (Fl) to search all businesses for names containing daycare’ or care. Text searches return a number of facilities as customers at the Fl and detects that three of these businesses have a similar transaction flow of high volume government ACH funding with little to no daycare expenses.
The analyst determines that site visits should be conducted for the three daycare businesses.
Which red flags would be an indicator that activity is connected to a corruption/bribery typology?
Large checks issued to various individuals with the memos noting “gift”, “thank you”, “favor”
Negative news found on the customer related to government-issued violations for safety
A client that runs a non-profit organization that aids refugees in leaving their home countries received a remittance from a money services business that was ten times the average. The client was recently detained for providing falsified passports to illegal immigrants. Which predicate offenses could be considered in the SAR/STR?
Human smuggling/trafficking
Terrorist financing
An investigator receives an alert documenting a series of transactions. A limited liability corporation (LLC) wired 59.000,000 USD to an overseas account associated with a state-run oil company. A second account associated with the state-run oil company wired 600,000,000 USD to the LLC. The LLC then wired money to other accounts, a money brokerage firm, and real estate purchases.
The investigator initiated an enhanced KYC investigation on the LLC. The financial institution opened the LLC account a couple of weeks prior to the series of transactions. The names associated with the LLC had changed multiple times since the account opened. A search of those names revealed relations with multiple LLCs. Public records about the LLCs did not show any identifiable business activities. Open-source research identified mixed reports about the brokerage firm. The firm indicated it purchased mutual funds for its clients and dispensed returns to clients. Media reports claimed the firm laundered money by holding for a fee before returning it to
investors. The investigator discovers that the bank has no records pertaining to ownership of the LLC.
What would this mean for the bank and/or investigator?
The bank is out of compliance with CIP regulations.
During a review of the accounts related to Richard Aston, an investigator notices a high number of incoming payments from various individuals. They also notice that these incoming payments typically occur during large sporting events or conferences. As a result of the account review, of which illegal activity does the investigator have reasonable grounds to suspect Richard Aston?
Aftermarket sales of entertainment admission tickets
According to the Financial Action Task Force, as part of their risk assessment, which are important data and information that a Trust and Company Service Provider must understand when establishing and administering a trust?
The responsibility and authority in the structure
The general purpose behind the structure
The training department is conducting awareness training for unusual customer identification scenarios. Which two indicators should be included?
The customer opens the account in the name of a family member who begins making large deposits.
The customer’s name and home address cannot be verified
An analyst reviews an alert for high volume Automated Clearing House (ACH) activity in an account. The analyst’s initial research finds the account is for a commercial daycare account that receives high volumes of large government-funded ACH transactions to support the programs. The account activity consists of checks (cheques) made payable to individual names in varying dollar amounts. One check indicates rent to another business.
An Internet search finds that the daycare company owner has previous government-issued violations for safety and classroom size needs, such as not having enough chairs and tables per enrollee. These violations were issued to a different daycare name. Simultaneous to this investigation, another analyst sends an email about negative news articles referencing local child/adult daycare companies misusing governmental grants. This prompts the financial institution (Fl) to search all businesses for names containing daycare’ or care. Text searches return a number of facilities as customers at the Fl and detects that three of these businesses have a similar transaction flow of high volume government ACH funding with little to no daycare expenses.
During the investigation, it was determined that some of the checks were issued to a mother-in-law of a PEP and deposited into her account with the Fl. This customer was not found on the Fl’s PEP list. How should the investigator proceed in this situation”?
Conduct the investigation as usual, since the activity in question is not directly connected to the PEP.
Send a referral to Sanctions/List Screening, or similar department/responsible individual, to ensure that the customer due diligence information is up to date.
Which information is it best practice to share at the very beginning of a well-written SAR/STR narrative?
The purpose of the SAR/STR narrative and a general description of the known or alleged violation
Law enforcement (LE) suspects human trafficking to occur during a major sporting event LE officers asked several financial institutions (FIs) to monitor financial transactions occurring before, during, and after the event. An investigator identified a pattern linked to a business. The business’ account received multiple even dollar deposits between midnight and 4:00 AM. They occurred each day for several days prior to the date of the sporting event. Also, large cash deposits, typically between 2,000 USD and 3,000 USD. made by a person to the business’ account occurred in many branches in the days after the sports event. There was little information about the company. The company did not have any history of employee payroll expenses or paying taxes. Expenses from the business account included air travel and hotel expenses. Searches about the person making cash deposits showed little. An online social media platform webpage with the individual’s name showed ads for dates’ and “companionship.” The Fl wants to create an automated alert for human trafficking money laundering after this investigation.
Which activity type should they target?
Multiple deposits between midnight and 4:00 AM
An EU bank account received 1.8 million EUR from a Swiss bank. The EU bank determines the originator was indicted by U.S. law enforcement, arrested in Switzerland, and extradited for alleged insider trading.
Which is the best reason the EU bank should file a SAR/STR?
The events raise concerns that the payment represents proceeds from insider trading.
Which payment method for purchasing luxury items is a red flag for potential money laundering?
Cash
Which scenarios are common to money laundering through online marketplaces and trade-based money laundering?
Over-valuation of the stated price of goods
No evidence of delivery of goods or shipping expenses
Due to an ever-diversifying business model and multi-jurisdictional footprint, a casino has decided to outsource the source of funds and wealth checks to a third-party provider. Why is it important for the casino to maintain control of the output from the provider?
The casino maintains ultimate responsibility for this activity and should maintain control to avoid non-compliance.
What action does the USA PATRIOT Act allow the US government to take regarding financial institutions (FIs) that are based outside of the US?
Subpoena documents from FIs that have no presence in the US.
Which is a key characteristic of the Financial Action Task Force (FATF) Regional Style Bodies for combating money laundering/terrorist financing?
Implementing regional mutual evaluation procedures
An investigator at a corporate bank is conducting transaction monitoring alerts clearance.
KYC profile background: An entity customer, doing business offshore in Hong Kong, established a banking business relationship with the bank in 2017 for deposit and loan purposes. It acts as an offshore investment holding company. The customer declared that the ongoing source of funds to this account comes from group-related companies.
* X is the UBO. and owns 97% shares of this entity customer;
* Y is the authorized signatory of this entity customer.
This entity customer was previously the subject of a SAR/STR.
KYC PROFILE
Customer Name: AAA International Company. Ltd
Customer ID: 123456
Account Opened: June 2017
Last KYC review date: 15 Nov 2020
Country and Year of Incorporation: The British Virgin Islands, May 2017 AML risk level: High
Account opening and purpose: Deposits, Loans, and Trade Finance
Anticipated account activities: 1 to 5 transactions per year and around 1 million per transaction amount
During the investigation, the investigator reviewed remittance transactions activities for the period from
Jul 2019 to Sep 2021 and noted the following transactions pattern:
TRANSACTION JOURNAL
Review dates: from July 2019 to Sept 2021
For Hong Kong Dollars (HKD) currency:
Incoming transactions: 2 inward remittances of around 1.88 million HKD in total from different third parties
Outgoing transactions: 24 outward remittances of around 9 4 million HKD in total to different third parties
For United States Dollars (USD) currency:
Incoming transactions: 13 inward remittances of around 3.3 million USD in total from different third parties Outgoing transactions: 10 outward remittances of around 9.4 million USD in total to different third parties.
RFI Information and Supporting documents:
According to the RFI reply received on 26 May 2021, the customer provided the bank with the information below:
1) All incoming funds received in HKD & USD currencies were monies lent from noncustomers of the bank.
Copies of loan agreements had been provided as supporting documents. All of the loan agreements were in the same format and all the lenders are engaged in trading business.
2) Some loan agreements were signed among four parties, including among lenders, borrower (the bank’s customer), guarantor, and guardian with supplemental agreements, which stated that the customer, as a borrower, who failed to repay the loan
Which additional information would support escalating this account for closure?
A review of outward remittances reveals the same pattern of several simple steps for each transaction
Law enforcement (LE) suspects human trafficking to occur during a major spotting event. LE officers asked several financial institutions (FIs) to monitor financial transactions occurring before, during, and after the event. An investigator identified a pattern linked to a business. The business account received multiple even dollar deposits between midnight and 4:00 AM. They occurred each day for several days prior to the date of the sporting event. Also, large cash deposits, typically between 2,000 USD and 3.000 USD. made by a person to the business’ account occurred in many branches in the days after the sports event There was little information about the company. The company did not have any history of employee payroll expenses or paying taxes. Expenses from the business account included air travel and hotel expenses. Searches about the person making cash deposits showed little. An online social media platform webpage with the individual’s name showed ads for dates” and “companionship.”
If the investigator uncovers evidence that foreign nationals are involved in this activity, they should also note the possible presence of:
Human smuggling
Which are primary purposes of Financial Action Task Force (FATF)-Style Regional Bodies?
Providing expertise and input in FATF policy-making
Promoting effective implementation of FATF recommendations