CKYCA Practice Questions

An arrest for a serious financial crime like money laundering constitutes significant adverse media and a material change in a client's risk profile. The front-line KYC analyst's role is to identify and investigate such alerts. Upon confirming the validity of the adverse news, the standard and correct procedure is to escalate the findings to a senior compliance officer or the Money Laundering Reporting Officer (MLRO). This senior-level review is necessary to determine the appropriate next steps, which may include filing a Suspicious Activity Report (SAR/STR), conducting an enhanced due diligence review, or terminating the client relationship. The absence of a subpoena does not negate the risk.

A. Close the alert as the client has not yet been found guilty.

This is incorrect. AML/KYC risk management is based on risk indicators, not legal convictions. An arrest for money laundering is a critical red flag that must be addressed.

B. Call the emergency police phone line and report the matter.

This is inappropriate. Emergency lines are for immediate threats. Law enforcement is already involved (evidenced by the arrest), and any institutional communication should be through official channels by designated personnel.

D. Contact and interview the client to ensure their innocence.

This is a severe breach of protocol. Contacting a client under investigation for money laundering could constitute "tipping off," a criminal offense that could compromise the investigation.

1. ACAMS Certified Know Your Customer Associate (CKYCA) Study Guide

(2022). Chapter 3

"Ongoing Monitoring

" details the process for handling alerts from negative news screening. It specifies that significant negative information

such as an arrest for a financial crime

must be escalated to compliance management for a decision on the appropriate course of action

including potential SAR filing. (Specific reference: Section on "Event-Driven Reviews" and "Escalation Procedures").

2. Financial Action Task Force (FATF). (2012-2023). International Standards on Combating Money Laundering and the Financing of Terrorism & Proliferation – The FATF Recommendations. The Interpretive Note to Recommendation 10 (Customer Due Diligence) states that financial institutions must conduct ongoing scrutiny of business relationships to ensure transactions are consistent with the institution's knowledge of the customer and their risk profile. A money laundering arrest is a trigger for such scrutiny

which involves internal reporting and escalation processes.

3. The Wolfsberg Group. (2019). Statement on Effectiveness: Demonstrating the Effectiveness of an AML/CTF Programme. This document emphasizes that an effective AML program includes clear escalation channels for identified high-risk issues. An analyst identifying a high-risk event like a client's arrest is expected to escalate the matter promptly for senior management review and action

which is a key indicator of a program's effectiveness. (See section on "Governance and Oversight").

A sudden, unexplained eightfold increase in turnover is a significant deviation from the customer's established financial profile and a major red flag. The company's refusal to provide a legitimate business explanation despite multiple requests elevates the risk and creates reasonable grounds to suspect that the funds may be related to illicit activity. In such circumstances, the obligation is to report these suspicions to the relevant Financial Intelligence Unit (FIU) promptly by filing a suspicious activity report (SAR). Delaying the report or continuing futile inquiries would be a failure to comply with anti-money laundering (AML) reporting requirements.

A. Delaying the report is inappropriate. The threshold for suspicion has already been met by the unexplained activity and the customer's evasiveness; action is required now.

B. This is futile as the prompt states the company has already refused to cooperate despite "several attempts," and continuing to ask only delays necessary reporting.

D. This passive "wait and see" approach neglects the immediate reporting obligation that arises once suspicion is formed based on the existing red flags.

1. Financial Action Task Force (FATF). The FATF Recommendations: International Standards on Combating Money Laundering and the Financing of Terrorism & Proliferation. FATF

Paris

France

2012 (updated 2023).

Recommendation 20 (Reporting of suspicious transactions): This recommendation mandates that if a financial institution suspects or has reasonable grounds to suspect that funds are the proceeds of a criminal activity

it must report its suspicions promptly to the FIU. The scenario presents clear grounds for suspicion. (See page 19).

2. The Wolfsberg Group. Statement on Effectiveness: Demonstrating the Effectiveness of an Anti-Money Laundering / Counter-Terrorist Financing (AML/CTF) Programme. The Wolfsberg Group

2019.

Section on Suspicious Activity Reporting (SARs): This document emphasizes the importance of timely and high-quality SARs as a critical outcome of an effective AML program. The scenario described (significant unexplained activity coupled with customer evasiveness) is a classic trigger for a SAR. (See page 4

"Key Elements of an Effective AML/CTF Programme").

3. Basel Committee on Banking Supervision. Sound management of risks related to money laundering and financing of terrorism. BCBS

2020.

Paragraph 43 (Reporting of suspicious transactions): This guidance states that banks must have policies for reporting suspicious transactions to national authorities and that such reports should be made in a timely manner. It also highlights the importance of monitoring for "unusual or suspicious transactions" compared to the customer's profile. An 800% increase in turnover is highly unusual. (See page 13).

A customer's expansion into international business operations is a significant trigger for an increase in inherent risk. This change introduces several critical risk factors, most notably jurisdictional risk. The new country or countries of operation may have weaker Anti-Money Laundering and Counter-Financing of Terrorism (AML/CFT) regulations, higher levels of corruption, or be subject to international sanctions. Cross-border transactions are inherently more complex and less transparent, making them more attractive for illicit activities. Therefore, a financial institution must re-evaluate the customer's risk profile and likely apply Enhanced Due Diligence (EDD) measures to mitigate these newly introduced risks.

A. A junior-level employee becoming a Politically Exposed Person (PEP) presents minimal risk to the corporate entity itself, as such an individual typically lacks significant control or influence over company funds or decisions.

B. Opening an additional cash management account is a normal business activity and does not, by itself, fundamentally alter the customer's risk profile. The risk is determined by the transactions, not the number of accounts.

C. A beneficial owner's company going public on a major exchange, such as one in the US, generally decreases risk. This is because it subjects the owner and their business to greater regulatory scrutiny and transparency requirements.

1. ACAMS CKYCA Certified Know Your Customer Associate Study Guide. Chapter 2

"The Risk-Based Approach." This chapter details the core components of a customer's risk profile

identifying geographic location and cross-border business activities as primary drivers of inherent risk. It specifies that operating in or transacting with multiple jurisdictions

especially those with weaker controls

elevates a customer's risk rating.

2. Financial Action Task Force (FATF). (2014). Guidance for a Risk-Based Approach for the Banking Sector. Paris: FATF/OECD. On page 19

Section 3.2.2

it is stated that customer risk factors include the geographic location of their business and their customers. The guidance emphasizes that cross-border operations require heightened scrutiny as part of a risk-based approach.

3. Basel Committee on Banking Supervision. (2014). Sound management of risks related to money laundering and financing of terrorism. Basel: Bank for International Settlements. Paragraph 24(d) identifies "customers in geographic locations that are known for high-risk of ML/FT" as a key risk category requiring specific attention. A customer's expansion abroad directly introduces this geographic risk factor.

A report from a reputable financial news source about a significant change, such as a corporate takeover, constitutes an event trigger for a Know Your Customer (KYC) review. While the news article is not sufficient evidence on its own to update a client's profile, it obligates the analyst to take proactive steps to verify the information. The most reliable and direct method of verification is to obtain primary source legal documents from the client, such as a merger agreement or an updated share register. This approach ensures that the client's records are updated based on official, verifiable documentation, even if public registries have not yet been updated.

B. Updating a client's profile based solely on a news source, even a reputable one, is non-compliant. News articles are not primary legal evidence and can be incomplete or inaccurate.

C. Putting the refresh on hold is a passive approach that neglects the analyst's duty to maintain accurate and up-to-date client information, thereby increasing potential risk.

D. This option implies inaction. While the public registry is a key verification source, it may not be the most current. The analyst must proactively seek to confirm the change using other reliable means.

1. ACAMS CKYCA Study Guide (2nd Edition). Chapter 4: Conducting Customer Due Diligence (CDD). The guide emphasizes that when an event-driven review is triggered (e.g.

by adverse media or news of a merger)

the financial institution must take steps to verify the change in the customer's profile

including ownership and control structure

by obtaining reliable

independent source documents. Relying on unverified media reports or passively waiting for public records to update is contrary to a risk-based approach.

2. Financial Action Task Force (FATF). (2023). Guidance on Beneficial Ownership (Recommendation 24). Paris: FATF/OECD. This guidance underscores the importance of using a range of sources to verify beneficial ownership information. It states that financial institutions should take reasonable measures to verify the identity of the beneficial owner using "reliable

independent source documents

data or information" (Interpretive Note to Recommendation 10). A news report would trigger the need to seek such documents.

3. Wolfsberg Group. (2017). Frequently Asked Questions (FAQs) on Correspondent Banking. The principles outlined

while specific to correspondent banking

stress the importance of event-driven reviews in response to material changes in a client's circumstances

including changes in ownership. The expectation is to gather and verify documentation to substantiate such changes. (See FAQ 45 on Periodic and Event-Driven Reviews).

Enhanced Due Diligence (EDD) involves taking additional steps beyond standard Customer Due Diligence (CDD) for customers identified as high-risk. Obtaining information on the customer's source of wealth (SoW) is a quintessential EDD measure. It requires a deeper investigation into how the customer accumulated their total assets to ensure they are from legitimate origins. This contrasts with standard CDD, which may only require understanding the source of funds for specific transactions. This measure is critical for managing and mitigating the risks associated with high-risk relationships, such as those with Politically Exposed Persons (PEPs).

A. Verifying the identity of the customer after the establishment of the business relationship: This is incorrect. Customer identity verification is a fundamental part of standard CDD and must be completed before or during the establishment of the relationship, not after.

B. Monitoring an account's transactions based on a monetary threshold: This is a component of standard ongoing monitoring applied to all customer accounts, not an enhanced measure specific to high-risk customers.

D. Identifying the purpose and nature of the business relationship: This is a core requirement of standard CDD for all customers, necessary to establish a baseline for expected account activity.

1. Financial Action Task Force (FATF). (2012-2023). International Standards on Combating Money Laundering and the Financing of Terrorism & Proliferation – The FATF Recommendations. Paris: FATF/OECD.

Reference: Interpretive Note to Recommendation 10 (Customer Due Diligence)

Paragraph 19. This section explicitly lists "obtaining information on the source of funds or source of wealth of the customer" as an example of an EDD measure for higher-risk customers. It also confirms that understanding the purpose and intended nature of the business relationship is a standard CDD requirement.

2. King's College London

Centre for the Study of Corruption. (2021). KYC/CDD: Know Your Customer/Customer Due Diligence. Courseware on Anti-Corruption and Law.

Reference: Module 3: Key AML/CFT Tools. The material distinguishes between CDD and EDD

noting that EDD for high-risk clients (e.g.

PEPs) requires additional steps such as "establishing the source of wealth and source of funds."

3. The Wolfsberg Group. (2020). Frequently Asked Questions (FAQs) on Source of Wealth (SoW) and Source of Funds (SoF).

Reference: Page 2

Section "What is the difference between SoW and SoF?". The document clarifies that establishing SoW is a key element of EDD

stating

"For customers that are assessed as high risk... FIs are generally required to take additional measures to mitigate the risk

which includes the establishment of that customer’s SoW."

The most appropriate and standard next step is to obtain the sale contract for the inherited real estate. This document serves as direct, independent evidence to corroborate the customer's claim regarding their source of wealth (SoW). The contract provides crucial, verifiable details, including the property's identity, the sale price (which should align with the funds being deposited), the date of the transaction, and the parties involved. This aligns with the risk-based approach to Customer Due Diligence (CDD), which requires financial institutions to take reasonable and proportionate measures to verify the SoW for higher-risk customers, such as a foreign individual.

A. Obtain a bank reference letter: A bank reference letter is a general due diligence document that confirms a customer's relationship with another bank but does not verify the specific origin of wealth from a real estate sale.

B. Visit the inherited real estate to verity the existence: A physical visit to a foreign property is impractical, disproportionately expensive, and not a standard verification procedure. More efficient methods like reviewing land registry records exist.

C. No further evidence is required for inheritance: Accepting a significant SoW claim like inheritance without any corroborating evidence is a major failure in due diligence and would not satisfy regulatory AML/CFT requirements.

1. The Wolfsberg Group

"Frequently Asked Questions (FAQs) on Source of Wealth and Source of Funds" (June 2020). In the section "What are some examples of SoW information/documentation an FI might decide to collect and verify?"

the guidance explicitly lists for "Sale of property" the appropriate evidence as: "copy of the contract of sale

land registry records and publicly available information on the property." (p. 10). This directly supports obtaining the sale contract as a primary verification step.

2. ACAMS Certified Know Your Customer Associate (CKYCA) Study Guide

Chapter 3: Elements of a KYC Program. The guide emphasizes that for Enhanced Due Diligence (EDD)

which is applicable to higher-risk customers

an institution must take steps to verify the customer's source of wealth. This involves obtaining "documents and information to corroborate the SoW

" such as contracts

deeds

or official records

rather than relying on the customer's word alone or undertaking impractical measures.

3. Financial Action Task Force (FATF)

"Guidance for a Risk-Based Approach for the Banking Sector" (October 2014). Recommendation 10 requires financial institutions to conduct enhanced due diligence for higher-risk relationships. The interpretive note states this includes taking "reasonable measures to establish the source of wealth and source of funds." Reasonable measures are understood to be the collection and review of relevant documentation

such as legal contracts

to substantiate the customer's claims. (p. 16

57).

Making multiple cash deposits just under the reporting threshold is a classic money laundering technique known as "structuring" or "smurfing." This activity is intentionally designed to circumvent regulatory requirements, such as Currency Transaction Reports (CTRs), which are automatically triggered by transactions exceeding a specific amount. Financial institutions view structuring as a significant red flag because it strongly indicates a deliberate attempt to conceal the size and origin of funds, thereby evading detection. This pattern of behavior almost always warrants further investigation to rule out illicit activity.

B. Adding a new beneficial owner is a common business event. While it requires updated due diligence, it is not inherently a red flag without other suspicious indicators.

C. A customer may have legitimate reasons for not having a local utility bill, such as recent relocation or living arrangements. It is a point for verification, not a primary red flag.

D. Sending remittances to family from a known and legitimate source of income is a normal and expected financial activity for many customers and is not considered suspicious.

1. ACAMS Certified Know Your Customer Associate (CKYCA) Study Guide. (2022). Chapter 3: Red Flag Indicators. The guide explicitly identifies structuring as a primary red flag for money laundering. It defines structuring as the act of breaking down large transactions into smaller ones to fall below reporting thresholds (e.g.

US$10

000) and notes that such patterns are highly indicative of suspicious activity requiring investigation.

2. Financial Action Task Force (FATF). (2012). Financial Flows Linked to the Production and Trafficking of Afghan Opiates. FATF

Paris

France. p. 28. This report lists "Structuring of cash deposits in amounts under the reporting threshold" as a key money laundering indicator associated with drug trafficking proceeds.

3. Financial Crimes Enforcement Network (FinCEN). (April 2017). Advisory to Financial Institutions on Cyber-Events and Cyber-Enabled Crime. FIN-2017-A001. p. 8. The advisory lists "Structuring transactions in a manner that is designed to evade recordkeeping and reporting requirements (e.g.

making multiple deposits to an account at various branches of the same institution on the same day)" as a financial red flag.

Customer Due Diligence (CDD) is the foundational process for understanding a customer's risk profile. The key elements form a comprehensive picture for risk assessment. This includes a customer overview (identity verification), understanding the nature of business or occupation to establish the purpose of the relationship and expected activity, and assessing the geographic profile for jurisdictional risk. A summary of red flags is the direct result of analyzing these elements to identify potential indicators of illicit financial activity, which is a core objective of the CDD process.

A. This option includes elements more appropriate for Enhanced Due Diligence (EDD), such as court records and extensive open-source intelligence, which are not standard for all customers.

C. This option incorrectly lists the institution's internal policies (risk appetite) and the outcome of the CDD process (risk assessment statement) as elements within the CDD itself.

D. This option mixes a core element (customer type) with data from ongoing monitoring (activity totals) and comparative analysis tools (peer summary), which are not initial CDD components.

1. ACAMS CKYCA Study Guide

Chapter 2: Customer Due Diligence (CDD). This chapter outlines the essential components of a CDD program

emphasizing the need to collect information to understand the customer

their business or occupation

their location

and the purpose of the account to build a comprehensive risk profile. It explicitly details how this information is used to identify red flags.

2. Financial Action Task Force (FATF). (2012-2023). International Standards on Combating Money Laundering and the Financing of Terrorism & Proliferation – The FATF Recommendations. FATF

Paris

France. Recommendation 10 and its Interpretive Note detail the required CDD measures

which include: (a) identifying the customer

(b) identifying the beneficial owner

and (c) understanding the purpose and intended nature of the business relationship. These directly correspond to the elements of customer overview and nature of business. Geographic risk is a key factor in applying a risk-based approach as described throughout the FATF standards.

Upon identifying a confirmed match with an Office of Foreign Assets Control (OFAC) list, the immediate and legally mandated first step is to block or freeze the customer's accounts and any associated assets. This action is required to prevent the sanctioned entity from accessing or moving funds, thereby ensuring the financial institution's compliance with sanctions regulations. This immediate containment prevents any further prohibited transactions. Internal escalation and reporting to the appropriate compliance officer or MLRO follows the freezing action.

A. Report the issue to the Money Laundering Reporting Officer.

This is a critical subsequent step, but the immediate legal obligation is to first freeze the assets to prevent their dissipation.

B. Form a sanctions committee to develop standard processes and procedures.

This is a governance function. Such procedures should already be in place and are not an immediate response to a specific sanctions hit.

D. Contact the customer to request clarification.

This is strictly prohibited as it constitutes "tipping off," which would alert the sanctioned party and is a serious regulatory violation.

1. ACAMS Certified Know Your Customer Associate (CKYCA) Study Guide. (2023). Chapter 3: Sanctions Screening. The guide specifies that upon a true match

the first action is to block the transaction or freeze the account as required by the specific sanctions program. Internal escalation is the next step.

2. U.S. Department of the Treasury

Office of Foreign Assets Control (OFAC). (2021). A Framework for OFAC Compliance Commitments. Section 5.C: Corrective Actions. The framework emphasizes the importance of immediate action upon identifying a potential violation

which in the case of a confirmed SDN match

involves blocking assets. Available at: https://ofac.treasury.gov/media/16331/download?inline (See page 9

discussing immediate reporting and containment).

3. U.S. Department of the Treasury

Office of Foreign Assets Control (OFAC). Frequently Asked Questions. FAQ #40 states

"When a transaction is blocked

the funds must be placed into an interest-bearing account... No payments

transfers

withdrawals

or other dealings may be made with respect to the blocked funds..." This implies the immediate freezing of the asset.

The Financial Action Task Force (FATF) provides a cascading approach for identifying the Ultimate Beneficial Owner (UBO). The primary method is to identify any natural person(s) who ultimately own or control a specified percentage of shares or voting rights (e.g., 25%). In this scenario, with 20 equal shareholders each holding 5%, no single individual meets this ownership threshold.

When no UBO can be identified through ownership, the FATF Recommendations require financial institutions to identify the natural person(s) exercising control through other means. If no such person can be identified, the institution must then identify the individual(s) who hold the position of senior managing official(s). This ensures a natural person is always held accountable.

A. The 25% threshold applies to individual ownership or control, not to an arbitrary aggregation of unrelated shareholders to meet the percentage.

B. Identifying all shareholders is not the required procedure; the goal is to find the individual(s) with ultimate effective control, not just list all owners.

C. FATF standards do not permit an entity to have "no UBO" for due diligence purposes; a fallback to senior management is explicitly required.

1. Financial Action Task Force. (2023). International Standards on Combating Money Laundering and the Financing of Terrorism & Proliferation – The FATF Recommendations. FATF

Paris

France. See Interpretive Note to Recommendation 10 (Customer Due Diligence)

paragraphs 5(a)(i) and 5(b)(i-ii)

which define the beneficial owner as the person with ultimate effective control and stipulate that if no such person can be identified

the senior managing official(s) should be identified.

2. Financial Action Task Force. (2014). FATF Guidance: Transparency and Beneficial Ownership. FATF

Paris

France. See Section II

Paragraph 28

page 13

which outlines the multi-pronged approach: first

identifying owners by a percentage threshold; second

identifying those who exercise control through other means; and third

as a fallback

identifying senior managing officials.

3. Walker

J. (2016). Measuring the Effectiveness of the FATF's Ultimate Beneficial Ownership Standard. Journal of Money Laundering Control

19(4)

405-418. This academic article discusses the implementation of FATF standards

noting that "where no natural person is identified as having a controlling ownership interest

the beneficial owner is the natural person exercising control through other means... [or] the senior managing official" (p. 408). DOI: https://doi.org/10.1108/JMLC-01-2016-0001.