CGSS Practice Questions

The U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) has increasingly focused its sanctions authority on high-risk actors within the digital asset ecosystem to combat illicit finance. OFAC has designated state-sponsored hacking groups, such as North Korea's Lazarus Group, for stealing cryptocurrency to fund illicit weapons programs. It has also sanctioned non-compliant virtual currency exchanges, like SUEX and Garantex, for facilitating transactions for ransomware actors, darknet markets, and other sanctioned entities. Furthermore, OFAC has designated cryptocurrency mixers, including Blender.io and Tornado Cash, for their role in laundering stolen virtual currency and obscuring the transaction trail for malicious cyber actors.

D. Software developers: OFAC sanctions illicit entities and their activities, not the profession of software development itself, unless a developer is knowingly part of a designated criminal or state-sponsored enterprise.

E. Credit unions: Credit unions are traditional depository institutions. While they may be exposed to crypto-related risks, they are not a type of high-risk entity within the digital asset ecosystem that OFAC has designated.

F. Central banks: A central bank is a state's primary monetary authority. While a country and its state-owned entities can be sanctioned, this is not a specific category of high-risk actor within the digital asset ecosystem.

1. U.S. Department of the Treasury. (2022, May 6). U.S. Treasury Sanctions Notorious Virtual Currency Mixer Blender.io. [Press Release]. Retrieved from https://home.treasury.gov/news/press-releases/jy0768. (This release explicitly mentions OFAC's designation of a mixer, Blender.io, and its use by the DPRK-state sponsored hacking group, Lazarus Group, to launder stolen cryptocurrency).

2. U.S. Department of the Treasury. (2022, August 8). U.S. Treasury Sanctions Notorious Virtual Currency Mixer Tornado Cash. [Press Release]. Retrieved from https://home.treasury.gov/news/press-releases/jy0916. (This document confirms the designation of another mixer, Tornado Cash, for laundering proceeds of cybercrimes, including for the Lazarus Group).

3. U.S. Department of the Treasury. (2021, September 21). Treasury Sanctions SUEX OTC Cryptocurrency Exchange for Facilitating Ransomware Payments. [Press Release]. Retrieved from https://home.treasury.gov/news/press-releases/jy0364. (This source provides a clear example of OFAC designating a cryptocurrency exchange for its role in illicit finance).

4. U.S. Department of the Treasury. (2022, April 5). Treasury Sanctions Russia-Based Hydra, World’s Largest Darknet Market, and Ransomware-Enabling Virtual Currency Exchange Garantex. [Press Release]. Retrieved from https://home.treasury.gov/news/press-releases/jy0703. (This release documents the designation of another virtual currency exchange, Garantex, for willfully disregarding AML/CFT obligations).

The phonetic and orthographic similarity between the potential client's name ("Al-Falah") and the sanctioned entity's name ("El-Fallah") constitutes a significant red flag, creating a potential sanctions match. The gravity of the sanction—issued by the UN for terrorism financing—mandates a thorough and cautious approach. Standard compliance procedure requires escalating such potential matches for further investigation and enhanced due diligence. This investigation is necessary to definitively determine if any relationship or link exists between the two entities before any onboarding decision is made. Relying on a single differing data point, such as the CEO's name, is insufficient to dismiss the alert.

A. Rejecting the client and notifying the regulator is a premature action reserved for a confirmed, positive match, not a potential one that requires further investigation.

C. Sanctions compliance, particularly concerning UN terrorism financing lists, is a matter of legal obligation, not institutional risk appetite. A potential match must be investigated, not accepted.

D. The similarity in names is a compelling and sufficient reason to escalate for investigation; dismissing the alert would be a serious compliance and regulatory failure.

1. ACAMS Certified Global Sanctions Specialist (CGSS) Study Guide, 6th Edition. Chapter 3, "Sanctions Screening and Process Management," details the multi-level alert review process. It specifies that initial alerts with similarities (Level 1) that cannot be immediately discounted must be escalated for further investigation (Level 2/3) to gather more information and make a definitive determination.

2. The Wolfsberg Group, "Guidance on Sanctions Screening," (2019). Section 3.3, "Alert Disposition," outlines the process for investigating alerts to determine if they are true matches. The guidance emphasizes that "an F.I. should establish a disposition process to determine whether an alert is a true match to a sanctions list entry or a false positive," which is precisely the action required in this scenario.

3. Financial Action Task Force (FATF), "Guidance on Countering Proliferation Financing," (2018). Paragraph 58 discusses the importance of identifying designated persons and entities. It states that financial institutions should have "appropriate measures and procedures...to focus on the identification of designated persons and entities," which inherently includes investigating potential matches found during screening.

Effective sanctions screening of payment messages requires a comprehensive analysis of all data fields that could identify a sanctioned party, location, or activity. The primary parties to the transaction, the remitter and beneficiary (A), are the most critical fields to screen. Additionally, all other entities involved in the payment chain, such as agents, intermediaries, and financial institutions (B), must be screened to prevent facilitation. Finally, free text fields (E) are crucial as they can contain unstructured data, such as the names of sanctioned vessels, cities, or alternative party names, which would not be captured by screening only the structured party fields.

C. Currency and notional value of the transaction: These fields are not screened against sanctions lists, which contain names of individuals, entities, and locations, not transactional values or currency types.

D. Effective day of the payment: The date of a transaction is a data point for record-keeping and timing, not an identifier that is matched against a sanctions list.

F. Sender's internal payment reference number: This is an internal tracking number for the originating institution and does not contain information about external parties or activities relevant to sanctions compliance.

---

1. ACAMS Certified Global Sanctions Specialist (CGSS) Study Guide, 2nd Edition.

Chapter 3: Sanctions Screening, Section: "What to Screen," pp. 68-70. This section explicitly states that screening must cover all parties to a transaction, including the originator, beneficiary, and any intermediary financial institutions. It also emphasizes the critical importance of screening unstructured data within free-text fields to identify hidden sanctions risks, such as references to sanctioned ports, vessels, or goods.

2. The Wolfsberg Group, "Payment Transparency Standards," October 2017.

Section: "Principles," p. 2. The document outlines that Payment Message Standards require the inclusion of the originator and beneficiary. It further states, "Each FI in the payment chain... should be able to apply its sanctions screening and other AML/CFT controls to the payment messages that it receives." This confirms the need to screen all parties (A, B) in the payment chain.

3. Financial Action Task Force (FATF), "International Standards on Combating Money Laundering and the Financing of Terrorism & Proliferation," The FATF Recommendations, October 2021.

Recommendation 16: Wire Transfers, Interpretive Note, p. 79. This recommendation mandates that originator and beneficiary information accompany wire transfers. It states, "Countries should ensure that financial institutions... monitor wire transfers for the purpose of detecting those which lack required originator and/or beneficiary information and take appropriate measures." This underpins the fundamental requirement to screen remitter and beneficiary data (A).

When a financial institution blocks funds due to Office of Foreign Assets Control (OFAC) regulations, it means the property and interests in property of a sanctioned party are frozen. The institution cannot return, transfer, or allow any dealings with these funds without authorization from OFAC. The correct and official procedure for the affected client to seek permission to access or transact with the blocked funds is to apply for a specific license directly from OFAC. This license is a formal authorization for a transaction that would otherwise be prohibited.

A. Initiating a new transaction from a blocked account, regardless of the currency, is a direct violation of the sanctions and is illegal.

B. The financial institution is legally obligated to block the funds and has no authority to release them without OFAC's explicit permission.

C. While local authorities may need to be aware, the ultimate jurisdiction and authority for unblocking funds under U.S. sanctions rests with OFAC.

1. U.S. Department of the Treasury, Office of Foreign Assets Control. "Apply for an OFAC License." The official OFAC website provides a portal and guidance for submitting license applications, stating, "OFAC has the authority to grant exemptions to prohibitions on a case-by-case basis by issuing specific licenses." This is the designated channel for seeking relief from a blocking action. (Source: https://ofac.treasury.gov/apply-for-an-ofac-license)

2. Code of Federal Regulations (CFR). Title 31, Part 501, Subpart E — "Licenses, Authorizations, and Statements of Licensing Policy." Section 501.801, "Licensing," outlines the general procedures for applying for specific licenses to engage in transactions that are prohibited by OFAC regulations. This subpart establishes the legal framework for the licensing process.

3. ACAMS CGSS Study Guide. The guide details the core functions of OFAC, including its enforcement actions of blocking assets and its authority to issue general and specific licenses to authorize certain transactions that would otherwise be prohibited. The application for a specific license is presented as the primary recourse for parties whose assets have been blocked. (Reference: ACAMS Certified Global Sanctions Specialist (CGSS) Study Guide, Chapter on "Sanctions Evasion and Enforcement").

A company with a US nexus is subject to the regulations enforced by the Office of Foreign Assets Control (OFAC). The US maintains a comprehensive economic embargo against Cuba, which is codified in the Cuban Assets Control Regulations (CACR). These regulations prohibit virtually all direct or indirect commercial transactions with Cuba or involving Cuban-origin goods. Cuban cigars are a well-known example of a product subject to this embargo. Therefore, a US-based company selling Cuban cigars globally would be in direct violation of US sanctions, regardless of the EU's position. The other items listed are generally not subject to such broad, origin-based prohibitions.

A. Textbooks: Informational materials, including textbooks, are generally exempt from sanctions prohibitions under US law (e.g., the Berman Amendment).

C. Toys: Common consumer goods like toys are not typically targeted by broad sanctions unless they are destined for a sanctioned entity or end-user.

D. Art reproductions: Similar to informational materials, cultural items like art reproductions are often exempt from sanctions, unlike high-value original art which can be a sanctions evasion risk.

1. ACAMS Certified Global Sanctions Specialist (CGSS) Study Guide, 2nd Edition. Chapter 2, "Sanctions Regimes and Governance Frameworks," discusses comprehensive country-based sanctions, frequently using the US embargo on Cuba as a primary example of a program that prohibits trade in goods originating from the sanctioned country.

2. U.S. Department of the Treasury, Office of Foreign Assets Control (OFAC). "Cuban Assets Control Regulations, 31 C.F.R. part 515." Section 515.204, "Importation of and dealings in certain merchandise," explicitly prohibits the importation of and all dealings in merchandise that is of Cuban origin. This directly applies to products like cigars.

3. Cliford, M. (2017). An Introduction to Sanctions. The London School of Economics and Political Science, IDEAS Reports SR024. This report discusses the mechanics of different sanctions types, noting that comprehensive trade embargoes, such as the US program against Cuba, prohibit the importation of goods from the target state (p. 11).

Fuzzy logic is employed in sanctions screening systems to identify potential matches that are not identical to the names on a sanctions list. Phonetic algorithms are a crucial component of this fuzzy matching process. These algorithms, such as Soundex or Metaphone, work by encoding names based on their pronunciation. This allows the screening system to flag names that sound similar but have different spellings (e.g., "John" and "Jon," or "Filip" and "Philip"), which is essential for detecting attempts to evade sanctions through minor name variations or to account for transliteration differences.

A. inequalities lists: This is not a standard term for a fuzzy logic algorithm; it describes a mathematical concept, not a matching technique used in sanctions screening.

B. big data: Big data refers to the large volume and complexity of data being processed, not a specific algorithm used within a fuzzy logic system.

D. whitelists: A whitelist is a list of pre-approved entities used to reduce false positives by automatically dismissing alerts for known non-matches; it is a control tool, not a matching algorithm.

1. ACAMS. (2023). Certified Global Sanctions Specialist (CGSS) Study Guide. Chapter 4: Sanctions Screening and Technology, Section: "Fuzzy Logic and Matching Algorithms," pp. 112-114. The guide explicitly discusses phonetic algorithms as a primary example of fuzzy logic techniques used to match names based on their sound.

2. Mena, J. (2021). Sanctions, Screening and Data: The New AML Frontier. Chapter 5: "The Role of Technology in Sanctions Compliance." This text details how fuzzy logic engines utilize various algorithms, with a specific focus on phonetic algorithms like Soundex and Metaphone for effective name matching against sanctions lists.

3. Financial Action Task Force (FATF). (2021). Guidance on Proliferation Financing Risk Assessment and Mitigation. Section on "Screening Tools," p. 45, para. 128. The guidance notes the importance of screening systems that can account for variations in spelling and transliteration, a function directly served by phonetic algorithms within a fuzzy logic framework.

When a financial institution outsources activities, it remains ultimately responsible for meeting its regulatory obligations. Therefore, the contract with the vendor is a critical control. It must legally obligate the vendor to adhere to all applicable sanctions laws and regulations. This clause ensures that the vendor is contractually bound to the same compliance standards as the bank, providing a legal basis for oversight, enforcement, and potential termination for non-compliance. This is a fundamental component of third-party risk management within a sanctions compliance program.

A. Risk assessment methodology: This is an internal process for the bank to evaluate the vendor; it is not a contractual obligation placed upon the vendor within the service agreement.

B. Investigation procedures for reviewing alerts: These are detailed operational instructions. While the vendor must follow them, they are typically included in a separate Statement of Work (SOW) or procedural manual, not the main legal contract.

C. Ongoing filter tuning procedures: This is a highly technical and operational detail. The contract would require effective filtering but would not typically contain the specific procedures for tuning.

1. ACAMS Certified Global Sanctions Specialist (CGSS) Study Guide, 6th Edition. Chapter 4, "Sanctions Compliance Program Components," in the section on Third-Party Management, emphasizes that contracts with third parties must include provisions requiring adherence to the institution's compliance policies and all applicable laws and regulations. This establishes the legal framework for the vendor relationship.

2. The Wolfsberg Group. (2019). Guidance on Sanctions Screening. Section 5.3, "Outsourcing," page 19, states: "The FIs should ensure that there is a written agreement/contract in place which clearly sets out the obligations of the service provider... The agreement should also include... a requirement to comply with the relevant legal and regulatory requirements..."

3. U.S. Department of the Treasury, Office of Foreign Assets Control (OFAC). (2019). A Framework for OFAC Compliance Commitments. Page 8, under the "Internal Controls" component, discusses the importance of ensuring that vendors and counterparties perform as expected to support the organization's sanctions compliance program. This is enforced through contractual obligations.

According to the Wolfsberg Group's risk-based approach, a financial institution's (FI) risk appetite is the most important factor in developing its sanctions compliance framework, including an in-house screening system. The risk appetite defines the level of sanctions risk the FI is willing to accept and sets the strategic direction for the entire program. It directly influences the design, scope, calibration (e.g., fuzzy logic thresholds), and governance of the screening system to ensure it is appropriately tailored to the FI's specific risk profile and tolerance levels. All other factors are components that are assessed and managed in alignment with this overarching strategic decision.

A. data quality: While critical for the operational effectiveness of a screening system, data quality is an input factor, not the primary strategic driver for its development.

B. geographical presence: This is a key input into the sanctions risk assessment, but the overall risk appetite determines how the risks associated with geography are managed.

D. information technology capabilities: These are practical enablers or constraints for building the system, but they do not define the system's fundamental design, purpose, or stringency.

1. The Wolfsberg Group, "Guidance on Sanctions Screening," 2019.

Section 2, "Governance and Oversight," Page 5: "The Board and Senior Management are responsible for setting the FI’s risk appetite for sanctions... The sanctions screening framework should be designed and implemented in a manner that is consistent with the FI’s established sanctions risk appetite." This establishes risk appetite as the foundational element guiding the framework's design.

Section 3, "Risk Assessment," Page 6: "An FI should take a risk-based approach (RBA) to designing and implementing its sanctions screening framework... The RBA should be proportionate to the FI’s specific inherent sanctions risks and in line with its risk appetite."

2. ACAMS, "Certified Global Sanctions Specialist (CGSS) Study Guide," 2nd Edition.

Chapter 2, "The Components of a Sanctions Compliance Program": The guide consistently emphasizes that the foundation of any effective sanctions compliance program is a thorough risk assessment and a clearly defined risk appetite approved by senior management. The design of all controls, including screening systems, flows from this initial determination.

An entity utilizing a general license from the Office of Foreign Assets Control (OFAC) operates under a framework of self-certification. It is the entity's strict responsibility to ensure their proposed transaction falls precisely within the scope, terms, and conditions of the published general license (E). A general license does not provide blanket immunity; it only authorizes the specific activities it describes. Therefore, the entity must still perform due diligence to ensure all other aspects of the transaction, including all parties and underlying activities, are compliant with all relevant sanctions regulations and do not involve other prohibited conduct (B).

A: A suspicious activity report is filed based on suspicion of illicit financial activity, not as a standard requirement for using a general license.

C: One applies for a specific license when a transaction is not authorized by a general license; a general license itself does not require an application.

D: General licenses authorize a wide variety of activities, not just those related to agriculture and medicine, which are only one category of authorizations.

1. ACAMS Certified Global Sanctions Specialist (CGSS) Study Guide, Chapter 4: Sanctions Evasion and Implementation. The guide explains that general licenses authorize a category of transactions without the need to apply to OFAC. It emphasizes that the person or entity using the license is responsible for ensuring the transaction is within the scope of the license and that overall compliance with sanctions regulations is maintained.

2. U.S. Department of the Treasury, Office of Foreign Assets Control (OFAC). "Frequently Asked Questions." FAQ #3 clarifies that "General licenses authorize a particular type of transaction for a class of persons without the need to apply for a license." This places the onus on the entity to determine if their transaction fits. FAQ #10 reinforces that the responsibility for ensuring a transaction complies with OFAC regulations rests with the transacting parties, highlighting the need for comprehensive due diligence beyond the specific terms of one license.

The Office of Foreign Assets Control (OFAC) 50% Rule stipulates that any entity owned 50 percent or more, directly or indirectly, by one or more blocked persons is itself considered blocked, regardless of whether it appears on the Specially Designated Nationals (SDN) List. The ownership interests of all blocked persons must be aggregated.

- Option A is 98% owned by an SDN.

- Option B is 50% owned in aggregate by two SDNs (35% + 15%).

- Option D is 58% owned in aggregate by three SDNs (12% + 18% + 28%).

All three scenarios meet or exceed the 50% ownership threshold, making the entities sanctioned.

C. The aggregate ownership by SDNs is 45% (20% + 25%), which is below the 50% threshold required for the entity to be considered blocked.

E. The aggregate ownership by SDNs is 48% (45% + 3%), which is below the 50% threshold required for the entity to be considered blocked.

F. The aggregate ownership by SDNs is 40% (10 x 4%), which is below the 50% threshold required for the entity to be considered blocked.

1. U.S. Department of the Treasury, Office of Foreign Assets Control. (2014, August 13). Revised Guidance on Entities Owned by Persons Whose Property and Interests in Property are Blocked. "Property and interests in property of an entity are blocked if the entity is owned, directly or indirectly, 50 percent or more by one or more blocked persons... This is known as OFAC’s 50 Percent Rule. The property and interests in property of such an entity are blocked regardless of whether the entity itself is listed in the annex to an Executive order or otherwise placed on OFAC’s list of Specially Designated Nationals and Blocked Persons (the “SDN List”)."

2. ACAMS. (2023). Certified Global Sanctions Specialist (CGSS) Study Guide. Chapter 2: Sanctions Regimes and Lists. The guide explains the application of OFAC's 50% Rule, emphasizing the aggregation of ownership stakes held by multiple sanctioned parties to determine if the 50% threshold is met. (Specific section on OFAC's 50 Percent Rule).