Free CRCM Practice Test

The Fair Debt Collection Practices Act (FDCPA), as implemented by Regulation F, outlines specific rules for acquiring a consumer's location information from a third party. A debt collector must identify themselves, state the call's purpose is to confirm or correct location information, and only identify their employer if asked. Furthermore, after obtaining the information, the collector is prohibited from contacting that third party again unless specific conditions are met, such as believing the initial information was erroneous and the third party now has correct information. All three statements (A, B, and C) accurately reflect these requirements.

A: This is a correct statement, but it is not the only correct one; B and C are also correct requirements. B: This is a correct statement, but it is not the only correct one; A and C are also correct requirements. C: This is a correct statement, but it is not the only correct one; A and B are also correct requirements.

1. Consumer Financial Protection Bureau. (2021). Debt Collection Practices (Regulation F). 12 C.F.R. § 1006.10. Retrieved from https://www.consumerfinance.gov/rules-policy/regulations/1006/10/

2. U.S. Congress. (1977). Fair Debt Collection Practices Act. 15 U.S.C. § 1692b.

When completing a CTR, a bank must verify the identity of the individual conducting the transaction by examining a document. Acceptable documents are typically government-issued and contain a photograph, name, and address. A "long-term deposit account relationship" is not a physical document and is therefore not an acceptable form of identification for this purpose, even if it is part of the bank's overall Customer Identification Program (CIP). The bank must rely on a specific, qualifying identification document.

A. A U.S. passport is a government-issued photo identification document and is explicitly listed as an acceptable form of ID.
C. A state-issued driver's license is a primary and acceptable form of government-issued photo identification.
D. A photo identification card issued by a government agency (state, local, or federal) is an acceptable form of identification.

1. Financial Crimes Enforcement Network (FinCEN). (2023). FinCEN Form 104, Currency Transaction Report Electronic Filing Instructions. "Item 15, ID Information," Page 11. The instructions specify verifying identity by examining a document, listing examples such as a Driver's License, Military ID, and Passport. A relationship is not listed as a document.

2. Federal Financial Institutions Examination Council (FFIEC). (2021). Bank Secrecy Act/Anti-Money Laundering Examination Manual. "Currency Transaction Reporting – Identification Requirements," Page 136. "For each currency transaction of more than $10,000, a bank must verify and record the identity of the individual presenting the transaction(s)..." The section emphasizes the examination of documents.

The Bank Secrecy Act (BSA) requires financial institutions to conduct an annual review for Phase II exempt customers to ensure they continue to meet the eligibility criteria. Phase II customers include non-listed businesses (like Beta) and payroll customers (like Zeta), whose eligibility is based on transactional behavior and risk. In contrast, Phase I exempt persons, such as companies whose stock is listed on a major exchange (like Alpha), do not require an annual review because their status is considered stable and publicly verifiable.

A. Alpha is a Phase I exempt person (a listed public company) and does not require an annual review per BSA regulations.
B. This is partially correct as Beta requires a review, but it is incomplete because Zeta, also a Phase II customer, requires one as well.
C. This is partially correct as Zeta requires a review, but it is incomplete because Beta, also a Phase II customer, requires one as well.

1. Financial Crimes Enforcement Network (FinCEN). (2020). FFIEC Bank Secrecy Act/Anti-Money Laundering Examination Manual. Section: "Currency Transaction Reporting Exemptions," pp. 148-149. The manual states, "For Phase II customers, the bank must document an annual review of each customer’s account activity to determine whether the customer continues to meet the exemption criteria." It clarifies Phase I customers do not require this review.

2. Code of Federal Regulations, 31 C.F.R. § 1020.315(e)(2). This section details the monitoring requirements for exempt persons, specifying the annual review for customers exempt under paragraph (b)(6) (non-listed business) and (b)(7) (payroll customers) of the same section.

The small bank performance standards are a specific set of evaluation criteria outlined in the Community Reinvestment Act (CRA) regulation. These criteria include the loan-to-deposit ratio, the percentage of loans in the assessment area, the geographic distribution of loans, and lending to borrowers of different income levels. A CRA strategic plan is a separate, alternative evaluation method that a bank can choose to develop in lieu of being examined under the standard tests. Therefore, the strategic plan is not a criterion within the small bank performance standard itself.

B: The loan-to-deposit ratio is a primary criterion used to assess a small bank's overall lending activity in relation to its deposit-taking activities. C: The geographic distribution of loans is a key criterion for evaluating how a bank is serving the credit needs throughout its assessment area, including in low- and moderate-income geographies. D: The percentage of loans within the bank’s assessment area is a fundamental criterion to ensure the bank is primarily serving the community in which it is chartered.

12 C.F.R. § 25.26, "Performance standards for small banks." This section lists the five criteria for evaluation, which do not include a strategic plan.

12 C.F.R. § 25.27, "Strategic plan." This section details the requirements for the strategic plan as an alternative evaluation method.

The implementing regulations for the Bank Protection Act specify minimum standards for security devices. Appendix B of 12 CFR Part 326 mandates that the banking office must be equipped with "locks on all exterior doors and on all exterior windows that may be opened." While other devices like guards, thicker vault doors, or bullet-proof glass are considered based on a risk assessment of the specific institution and its location, tamper-resistant locks on exterior openings are a baseline requirement for the physical security of the premises.

A. The use of security guards is a consideration based on the bank's specific circumstances, not a universal minimum requirement.
C. Specific vault construction standards are required for vaults, but not every bank facility has a vault, whereas all have exterior doors and windows.
D. Bullet-proof glass is a security enhancement to be considered where appropriate, but it is not a minimum requirement for all windows in every bank.

- Code of Federal Regulations, Title 12, Part 326, Appendix B, "Minimum Security Devices." Section II.A.1 states the requirement for locks on exterior doors and windows. (FDIC)

- Code of Federal Regulations, Title 12, Part 21, Appendix B, "Minimum Security Devices." Section II.A.1 contains the same requirement for national banks. (OCC)

- Federal Reserve System, "Bank Protection Act," SR 99-20 (SUP), (July 29, 1999). This supervisory letter references the minimum security device standards in the regulation.

The integration of tactical compliance procedures into business line operations is a core function of the compliance department. This involves actively collaborating with and assisting business units to ensure their day-to-day procedures are developed or revised to be fully compliant with current regulations. This proactive partnership is fundamental to embedding compliance into the bank's culture and operations. Options A and B are principles that guide this work, but D describes the foundational activity itself.

A: This is a correct principle, but it's a quality of the outcome, not the description of the integration activity itself, which is what D describes. B: This is a valid point for revisions, but D is a broader and more foundational description of the compliance function's role in the entire process. C: This describes the ultimate goal (risk mitigation) of the procedures, not the process of integrating them.

1. Office of the Comptroller of the Currency (OCC). (2023, October). Comptroller's Handbook: Corporate and Risk Governance. Section: "Independent Risk Management," pp. 21-22. The handbook states that independent risk management (which includes compliance) is responsible for "providing ongoing assistance and guidance to business lines" and "assisting in the development and revision of policies and procedures."

2. Board of Governors of the Federal Reserve System. (2008). SR 08-8: Compliance Risk Management Programs and Oversight at Large Banking Organizations with Complex Compliance Profiles. Attachment, p. 6. This guidance notes that a key role of the corporate compliance function is to "assist in the development of business-line compliance policies and procedures."

The question asks for actions by which a debt collector may not abuse or harass a consumer. Under the Fair Debt Collection Practices Act (FDCPA), all listed options are explicitly prohibited as forms of harassment or abuse. The statute provides a non-exhaustive list of such conduct, which includes threatening violence (A), using obscene or profane language (B), causing a phone to ring repeatedly with intent to harass (C), and placing calls without meaningful disclosure of the caller's identity (D). Therefore, all four options are correct examples of prohibited conduct.

This question is structured as a "select one" but all options are legally correct examples of prohibited conduct under 15 U.S.C. § 1692d. No option is incorrect.

1. Fair Debt Collection Practices Act, 15 U.S.C. § 1692d, "Harassment or abuse."

§ 1692d(1) prohibits "The use or threat of use of violence or other criminal means to harm the physical person, reputation, or property of any person." (Corresponds to A)

§ 1692d(2) prohibits "The use of obscene or profane language..." (Corresponds to B)

§ 1692d(5) prohibits "Causing a telephone to ring or engaging any person in telephone conversation repeatedly or continuously with intent to annoy, abuse, or harass..." (Corresponds to C)

§ 1692d(6) prohibits "...the placement of telephone calls without meaningful disclosure of the caller’s identity." (Corresponds to D)

2. Consumer Financial Protection Bureau (CFPB). (2021). Debt Collection Practices (Regulation F), § 1006.14, "Harassment or Abuse." This regulation restates and provides context for the prohibitions listed in the FDCPA statute.

The Bank Secrecy Act (BSA) requires financial institutions to retain records related to currency transactions greater than $10,000 for a period of five years from the date of the transaction. This includes copies of the filed Currency Transaction Reports (CTRs) and any supporting documentation that substantiates the information on the report. This five-year retention period allows law enforcement and regulatory agencies adequate time to request and review historical transaction data during investigations or examinations.

A. Two years is an insufficient retention period and does not comply with the specific requirements of the Bank Secrecy Act.
B. Three years is an insufficient retention period and does not comply with the specific requirements of the Bank Secrecy Act.
D. Seven years is longer than the required retention period. While a bank may choose to keep records longer, the BSA mandate is five years.

1. Code of Federal Regulations, 31 C.F.R. § 1010.430(d). This regulation explicitly states, "Records required to be kept... shall be retained for a period of five years." It directly references records required under § 1010.311 (CTR reporting).

2. Financial Crimes Enforcement Network (FinCEN). (2020). FFIEC Bank Secrecy Act/Anti-Money Laundering Examination Manual. Section: "BSA Recordkeeping Requirements," Appendix P. This appendix provides a quick reference chart stating a 5-year retention requirement for "Information related to a CTR."

The documentation of a compliance risk assessment focuses on identifying, measuring, and monitoring risk. Common components include identifying inherent risks, assessing the effectiveness of controls, and determining the residual risk level. Measuring Key Risk Indicators (KRIs) and identifying Key Performance Indicators (KPIs) for controls are standard methods used within this documentation. However, training the leadership is a risk mitigation activity or a control, not a component of the risk assessment document itself. The document would assess the effectiveness of training, but the act of training is external to the document.

A: While poorly worded, "risk assessment" likely refers to the core process of identifying and rating inherent and residual risks, a key component. B: Measuring KRIs is a standard component for monitoring the level of risk documented in the assessment. C: Identifying KPIs is a standard method for measuring the effectiveness of controls, which is a core part of the risk assessment.

1. Office of the Comptroller of the Currency (OCC). (2023, October). Comptroller's Handbook: Corporate and Risk Governance. Section: "Risk Assessment," pp. 17-18. The handbook details the risk assessment process, including identifying inherent risk, evaluating risk management activities (controls), and assessing residual risk. Training is cited as a control, not a component of the assessment document.

2. Federal Reserve System. (2021). Consumer Compliance Handbook. Section: "Compliance Management System," p. 12. The handbook describes the risk assessment process as identifying and measuring risk in products and services. It does not list training as a component of the assessment documentation itself.

3. The Committee of Sponsoring Organizations of the Treadway Commission (COSO). (2017). Enterprise Risk Management—Integrating with Strategy and Performance. This framework, widely used in banking, outlines risk assessment components like risk identification and analysis. Control activities, such as training, are a separate component of the overall ERM framework, not a part of the assessment documentation.

A bank may refund amounts that were erroneously withheld.
- For Ms. Nelson, withholding was erroneous. She provided an "awaiting TIN" certification, which grants a 60-day grace period before backup withholding must start. The interest was paid on March 31, well within this 60-day period, so no withholding should have occurred.
- For Mr. Whiteside, withholding was also erroneous. Although he initially provided an incorrect TIN, he furnished the correct, certified TIN on March 10. The bank had the correct TIN before the interest payment on March 31, so withholding was not required.
- For Ms. Miller, withholding was correct. She did not provide a TIN or an awaiting-TIN certification upon account opening. Therefore, the bank was required to begin backup withholding immediately on the March 31 payment. She must claim this amount as a credit on her annual income tax return.

A. Refunding to all payees is incorrect because the withholding for Ms. Miller was required by law and not erroneous.
C. Refunding only to Mr. Whiteside is incorrect because the withholding for Ms. Nelson was also erroneous due to the 60-day grace period.
D. Refunding only to Ms. Nelson is incorrect because the withholding for Mr. Whiteside was also erroneous as the bank had a correct TIN before payment.

1. Code of Federal Regulations. 26 C.F.R. § 31.3406(d)-3(a). This section details the 60-day grace period for payees who have applied for and are awaiting a TIN.

2. Code of Federal Regulations. 26 C.F.R. § 31.3406(e)-1(c). This regulation specifies that a payor must stop withholding within 30 days after receiving a certified TIN. Since Mr. Whiteside provided his TIN on March 10, withholding on a March 31 payment was erroneous.

3. Code of Federal Regulations. 26 C.F.R. § 31.6413(a)-3. This section addresses the repayment by a payor of tax erroneously withheld from a payee.