Question 40
A compliance team studies the following event: A technology supplier with access to screening rules also sells services to a sanctioned-counterparty intermediary. Which finding most closely matches the event?
- Combined dual-use trade and geographic high-risk scenario
- Inconsistent risk assessment coverage by financial-crime risk type
- Failure to integrate fraud and laundering risk signals
- Third-party technology and insider conflict risk
Explanation
Correct Answer
D:Vendor relationships can expose confidential controls and create conflicts that affect sanctions compliance. The distinguishing facts concern a technology supplier with access to screening rules also sells services to a sanctioned-counterparty…; the competing interpretation would require evidence of a trade client purchases dual-use machinery through several intermediary companies near a….
Incorrect Answers
A:When testing the contrasting pattern of a technology supplier with access to screening rules also sells services to a…, remember that goods, destination, and opaque counterparties create overlapping sanctions and proliferation concerns. A case of a trade client purchases dual-use machinery through several intermediary companies near a conflict… would support that classification; here the relevant evidence is a technology supplier with access to screening rules also sells services to a….
B:An enterprise view alone may not characterize distinct sanctions exposure and controls; the observed record here instead involves a technology supplier with access to screening rules also sells services to a…. For the alternative option of inconsistent risk assessment coverage by financial-crime risk type in this risk interpretation review involving a technology supplier with access to screening rules also sells services to a…, the prerequisite pattern differs: a high-risk subsidiary is included in the enterprise risk assessment but not in the…. The question instead describes a technology supplier with access to screening rules also sells services to a….
C:Against the reported situation in which a technology supplier with access to screening rules also sells services to a…, proceeds of fraud may move rapidly through accounts that also present AML exposure. This would change the core risk being assessed from a technology supplier with access to screening rules also sells services to a… to a fraud team sees mule-account patterns that the AML team never incorporates into customer risk….
Question 41
The following pattern appears in a customer risk review: A bank asks its financial intelligence unit to approve every suspicious-activity decision in advance. Which underlying concern best fits the facts?
- Underuse of FATF-style regional risk intelligence
- Confusion between international standards and domestic law
- Confusion about FIU reporting and bank accountability
- Insufficient identity-based sanctions matching
Explanation
Correct Answer
C:An FIU receives, analyzes, and disseminates intelligence; it does not routinely replace the institution's own reporting judgment. The key factual distinction is between a bank asks its financial intelligence unit to approve every suspicious-activity decision in advance and the alternative pattern in which a bank ignores guidance from the regional FATF-style body serving one of its markets.
Incorrect Answers
A:Against the reported situation in which a bank asks its financial intelligence unit to approve every suspicious-activity…, regional bodies support local implementation and identify geographic typologies relevant to financial institutions. A case of a bank ignores guidance from the regional FATF-style body serving one of its markets would support that classification; here the relevant evidence is a bank asks its financial intelligence unit to approve every suspicious-activity decision in advance.
B:The relevant alternative mechanism is different from a bank asks its financial intelligence unit to approve every suspicious-activity…: FATF sets global recommendations, while each jurisdiction implements binding duties through its own legal framework. The prerequisite pattern differs: a multinational bank treats FATF recommendations as directly enforceable statutes in every…. The question instead describes a bank asks its financial intelligence unit to approve every suspicious-activity decision in advance.
D:This is not the central mechanism when a bank asks its financial intelligence unit to approve every suspicious-activity…; minor spelling differences do not by themselves rule out that two records refer to the same person. The alternative requires the facts represented by a sanctions analyst releases a possible listed-person match because the customer name has different…; the principal facts instead show a bank asks its financial intelligence unit to approve every suspicious-activity decision in advance.
Question 42
The following pattern appears in a customer risk review: An AML analytics unit reports record throughput but growing unresolved high-risk alerts remain untouched. Which underlying concern best fits the facts?
- Operational resilience gap in AFC technology integration
- Efficiency measure masks operational effectiveness decline
- Incomplete RegTech procurement due diligence
- Privacy-preserving collaborative analytics requirement
Explanation
Correct Answer
B:Closing simple cases quickly does not compensate for failing to investigate the highest-risk matters. The distinguishing facts concern an AML analytics unit reports record throughput but growing unresolved high-risk alerts remain untouched; the competing interpretation would require evidence of a monitoring system change goes live with no fallback when its external API becomes….
Incorrect Answers
A:Against the reported situation in which an AML analytics unit reports record throughput but growing unresolved high-risk…, third-party outages can interrupt screening or monitoring if failure modes are not governed. The prerequisite pattern differs: a monitoring system change goes live with no fallback when its external API becomes unavailable. The question instead describes an AML analytics unit reports record throughput but growing unresolved high-risk alerts remain….
C:Compared with the stated facts about an AML analytics unit reports record throughput but growing unresolved high-risk…, a promising tool may fail if its supported fields, latency, and rules do not match real operational requirements. The alternative requires the facts represented by a bank selects a screening vendor based on advertised accuracy without checking payment-system…; the principal facts instead show an AML analytics unit reports record throughput but growing unresolved high-risk alerts remain….
D:This is not the central mechanism when an AML analytics unit reports record throughput but growing unresolved high-risk…; jurisdictional restrictions may prohibit sharing raw data even when aggregated risk insight is useful. That mechanism is illustrated by a cross-border analytics team seeks risk insights without moving identifiable customer files…, not by the stated activity involving an AML analytics unit reports record throughput but growing unresolved high-risk alerts remain….
Question 43
The financial-crime unit receives this referral: A fintech buys a transaction-monitoring platform without any process for verifying customers at onboarding. Which risk is the referral primarily illustrating?
- Monitoring data completeness failure
- Coverage gap across the customer control lifecycle
- Stale external ownership data risk
- Control friction disproportionate to the actual threat
- Excessive customer friction without risk differentiation
Explanation
Correct Answer
B:Ongoing monitoring cannot replace identification and due diligence controls required when a relationship begins. This classification follows the described behavior; the different example of a data warehouse silently drops payment records that fail a new schema validation rule would raise a different primary exposure.
Incorrect Answers
A:This is not the central mechanism when a fintech buys a transaction-monitoring platform without any process for verifying…; unreported ingestion loss creates surveillance blind spots even when matching rules work correctly. That mechanism is illustrated by a data warehouse silently drops payment records that fail a new schema validation rule, not by the stated activity involving a fintech buys a transaction-monitoring platform without any process for verifying customers at….
C:A public register is useful corroboration but may lag behind changes in real control; the observed record here instead involves a fintech buys a transaction-monitoring platform without any process for verifying…. The prerequisite pattern differs: an onboarding system relies on a beneficial-ownership register that has not been updated following…. The question instead describes a fintech buys a transaction-monitoring platform without any process for verifying customers at….
D:Against the reported situation in which a fintech buys a transaction-monitoring platform without any process for verifying…, adding authentication steps to low-risk events may harm user access without meaningful control benefit. This would change the core risk being assessed from a fintech buys a transaction-monitoring platform without any process for verifying customers at… to a payment app adds facial recognition to every minor account-profile change despite low observed….
E:The relevant alternative mechanism is different from a fintech buys a transaction-monitoring platform without any process for verifying…: Uniform requirements can drive abandonment while failing to focus review on more complex exposure. The alternative requires the facts represented by digital onboarding requests identical extensive checks from simple low-risk applicants and…; the principal facts instead show a fintech buys a transaction-monitoring platform without any process for verifying customers at….
Question 44
A relationship team reports the following activity: A virtual-asset provider fails to exchange required originator and beneficiary information with another covered provider. How should its principal financial-crime exposure be classified?
- Structuring through an MSB agent network
- Online gambling third-party payment risk
- Fraud and laundering through claims disbursement
- Virtual-asset Travel Rule control gap
Explanation
Correct Answer
D:Covered transfers may require identifying information to accompany or be available with transfers under local implementation. This classification follows the described behavior; the different example of a money remitter's agent repeatedly breaks large customer transfers into many nearby… would raise a different primary exposure.
Incorrect Answers
A:The relevant alternative mechanism is different from a virtual-asset provider fails to exchange required originator and beneficiary…: Splitting remittances may conceal aggregate value and evade monitoring thresholds. The alternative requires the facts represented by a money remitter's agent repeatedly breaks large customer transfers into many nearby transactions; the principal facts instead show a virtual-asset provider fails to exchange required originator and beneficiary information with….
B:Compared with the stated facts about a virtual-asset provider fails to exchange required originator and beneficiary…, multiple funders and changed beneficiaries undermine verification of whose value is being transferred. That mechanism is illustrated by an online betting account is funded by several payment cards and withdraws winnings to a different…, not by the stated activity involving a virtual-asset provider fails to exchange required originator and beneficiary information with….
C:This is not the central mechanism when a virtual-asset provider fails to exchange required originator and beneficiary…; unrelated beneficiaries may receive fabricated or diverted claim proceeds. A case of a motor-insurance intermediary sends claim payments to accounts not linked to insured persons or… would support that classification; here the relevant evidence is a virtual-asset provider fails to exchange required originator and beneficiary information with….
Question 45
A relationship team reports the following activity: A bank responds to a law-enforcement subpoena by providing unrelated records outside the requested period. How should its principal financial-crime exposure be classified?
- Failure to enforce conditional risk acceptance
- Excessive disclosure beyond lawful request scope
- Unclear high-risk offboarding governance
- Insufficient investigation rationale and audit trail
- Financial exclusion caused by inflexible identity controls
- Unjustified corridor-wide de-risking
Explanation
Correct Answer
B:Valid requests still require checking scope, legal process, and confidentiality obligations. The specific risk is grounded in a bank responds to a law-enforcement subpoena by providing unrelated records outside the requested period, not in the alternative scenario of a customer is retained despite repeated unresolved suspicious transactions because revenue….
Incorrect Answers
A:The relevant alternative mechanism is different from a bank responds to a law-enforcement subpoena by providing unrelated records outside…: A documented acceptance decision is ineffective if required safeguards are not implemented. This would change the core risk being assessed from a bank responds to a law-enforcement subpoena by providing unrelated records outside the requested… to a customer is retained despite repeated unresolved suspicious transactions because revenue targets….
C:This is not the central mechanism when a bank responds to a law-enforcement subpoena by providing unrelated records outside…; client exits require documented decisions that consider legal restrictions and financial-crime risk. That mechanism is illustrated by a bank decides to exit a high-risk customer while two divisions disagree about who has approval…, not by the stated activity involving a bank responds to a law-enforcement subpoena by providing unrelated records outside the requested….
D:When testing the contrasting pattern of a bank responds to a law-enforcement subpoena by providing unrelated records outside…, remember that a defensible closure requires facts supporting why unusual indicators did not establish suspicion. A case of an investigator closes a case as not suspicious without recording why multiple cash transfers were… would support that classification; here the relevant evidence is a bank responds to a law-enforcement subpoena by providing unrelated records outside the requested….
E:Risk-based identification may allow lawful alternative evidence, subject to binding rules; the observed record here instead involves a bank responds to a law-enforcement subpoena by providing unrelated records outside…. The prerequisite pattern differs: a bank terminates all accounts belonging to refugees because identity documents differ from its…. The question instead describes a bank responds to a law-enforcement subpoena by providing unrelated records outside the requested….
F:Against the reported situation in which a bank responds to a law-enforcement subpoena by providing unrelated records outside…, specific bad cases do not establish that every transfer in the corridor is unmanageable. This would change the core risk being assessed from a bank responds to a law-enforcement subpoena by providing unrelated records outside the requested… to an MSB withdraws from an entire remittance corridor after isolated suspicious cases without….
Question 46
This unusual pattern is reported in a financial institution: A charity receives small lawful donations and a trustee secretly diverts the proceeds to a prohibited militant network. Which exposure is most directly indicated?
- Terrorist financing using lawful-source funds
- Possible terrorist-financing diversion via remittances
- Regulatory and enforcement risk from late escalation
- Reputational and counterparty access risk
Explanation
Correct Answer
A:The origins may be legitimate; the central concern is the eventual use and beneficiary of the transfers. This classification follows the described behavior; the different example of a nonprofit sends numerous low-value remittances to a facilitator in a conflict zone after… would raise a different primary exposure.
Incorrect Answers
B:The relevant alternative mechanism is different from a charity receives small lawful donations and a trustee secretly diverts the proceeds…: Small transfers to a high-risk beneficiary may signal misuse, but charity activity alone is not proof of crime. The alternative requires the facts represented by a nonprofit sends numerous low-value remittances to a facilitator in a conflict zone after a…; the principal facts instead show a charity receives small lawful donations and a trustee secretly diverts the proceeds to a….
C:Compared with the stated facts about a charity receives small lawful donations and a trustee secretly diverts the proceeds…, failure to investigate and report within governing requirements can result in supervisory action and compliance exposure. That mechanism is illustrated by a suspicious-activity backlog grows until analysts miss required reporting deadlines, not by the stated activity involving a charity receives small lawful donations and a trustee secretly diverts the proceeds to a….
D:This is not the central mechanism when a charity receives small lawful donations and a trustee secretly diverts the proceeds…; other institutions may reduce exposure to a bank whose control failures create reputational or regulatory risk. A case of a bank loses correspondent relationships after repeated failures to remediate reported AML… would support that classification; here the relevant evidence is a charity receives small lawful donations and a trustee secretly diverts the proceeds to a….
Question 47
A relationship team reports the following activity: A parts distributor attempts a payment to a company controlled by a designated person but uses a changed trading name. How should its principal financial-crime exposure be classified?
- Extortion-derived criminal proceeds
- Reputational and counterparty access risk
- Sanctions ownership and control exposure
- Economic and social harm from money laundering
Explanation
Correct Answer
C:An undisclosed controlling interest can create sanctions risk even where the immediate trading name is not a direct list match. The key factual distinction is between a parts distributor attempts a payment to a company controlled by a designated person but uses a changed… and the alternative pattern in which a technology company pays regular 'recovery fees' to accounts linked to a regional….
Incorrect Answers
A:The relevant alternative mechanism is different from a parts distributor attempts a payment to a company controlled by a designated person…: Payments demanded under threat constitute potential proceeds of a predicate offence regardless of accounting labels. A case of a technology company pays regular 'recovery fees' to accounts linked to a regional extortion group would support that classification; here the relevant evidence is a parts distributor attempts a payment to a company controlled by a designated person but uses a….
B:Compared with the stated facts about a parts distributor attempts a payment to a company controlled by a designated person…, other institutions may reduce exposure to a bank whose control failures create reputational or regulatory risk. For the alternative option of reputational and counterparty access risk in this risk interpretation review involving a parts distributor attempts a payment to a company controlled by a designated person but uses…, the prerequisite pattern differs: a bank loses correspondent relationships after repeated failures to remediate reported AML…. The question instead describes a parts distributor attempts a payment to a company controlled by a designated person but uses a….
D:When testing the contrasting pattern of a parts distributor attempts a payment to a company controlled by a designated person…, remember that criminal proceeds can distort markets and fund other harmful conduct even without immediate bank losses. The alternative requires the facts represented by an illicit trade network infiltrates local payment channels and distorts competition with…; the principal facts instead show a parts distributor attempts a payment to a company controlled by a designated person but uses a….
Question 48
An analyst must explain this case to a risk committee: Different businesses label the same beneficial-owner field as shareholder, controller, or principal without common definitions. What is the core risk mechanism?
- Document-image verification treated as reliable identity proof
- Inconsistent data taxonomy and semantic mapping
- Coverage gap across the customer control lifecycle
- Presentation-attack vulnerability in digital identity checks
Explanation
Correct Answer
B:A field name alone may hide differences in control concepts and beneficial ownership completeness. The distinguishing facts concern different businesses label the same beneficial-owner field as shareholder, controller, or principal…; the competing interpretation would require evidence of an e-KYC provider verifies an image of an identity document but never validates its issuer….
Incorrect Answers
A:The relevant alternative mechanism is different from different businesses label the same beneficial-owner field as shareholder,…: Readable identity text may still come from a forged or tampered document. The prerequisite pattern differs: an e-KYC provider verifies an image of an identity document but never validates its issuer or…. The question instead describes different businesses label the same beneficial-owner field as shareholder, controller, or principal….
C:This is not the central mechanism when different businesses label the same beneficial-owner field as shareholder,…; ongoing monitoring cannot replace identification and due diligence controls required when a relationship begins. The alternative requires the facts represented by a fintech buys a transaction-monitoring platform without any process for verifying customers at…; the principal facts instead show different businesses label the same beneficial-owner field as shareholder, controller, or principal….
D:When testing the contrasting pattern of different businesses label the same beneficial-owner field as shareholder,…, remember that face similarity alone does not establish that a live person is present during onboarding. That mechanism is illustrated by a remote account applicant uses a high-quality printed face photograph to defeat a simple selfie…, not by the stated activity involving different businesses label the same beneficial-owner field as shareholder, controller, or principal….
Question 49
The following pattern appears in a customer risk review: Several esports betting accounts trade bets against each other and cash out through the same device network. Which underlying concern best fits the facts?
- Stablecoin reserve and redemption-channel financial-crime exposure
- E-commerce collusive transaction laundering
- Collusive betting and coordinated value transfer
- Virtual-asset Travel Rule control gap
Explanation
Correct Answer
C:Related accounts can use staged wagers to shift balances while making transfers appear to be gaming results. The distinguishing facts concern several esports betting accounts trade bets against each other and cash out through the same device…; the competing interpretation would require evidence of a virtual-asset custodian processes large stablecoin redemptions through offshore issuers….
Incorrect Answers
A:Against the reported situation in which several esports betting accounts trade bets against each other and cash out through…, off-ramp relationships and issuer arrangements can introduce indirect counterparties and opaque flows. The alternative requires the facts represented by a virtual-asset custodian processes large stablecoin redemptions through offshore issuers with weak…; the principal facts instead show several esports betting accounts trade bets against each other and cash out through the same device….
B:The relevant alternative mechanism is different from several esports betting accounts trade bets against each other and cash out through…: Fake trades can create a false sales narrative for moving value to connected sellers. That mechanism is illustrated by a marketplace pays seller proceeds to newly added bank accounts after bursts of fabricated purchase…, not by the stated activity involving several esports betting accounts trade bets against each other and cash out through the same device….
D:This is not the central mechanism when several esports betting accounts trade bets against each other and cash out through…; covered transfers may require identifying information to accompany or be available with transfers under local implementation. For the alternative option of virtual-asset travel rule control gap in this risk interpretation review involving several esports betting accounts trade bets against each other and cash out through the same…, the prerequisite pattern differs: a virtual-asset provider fails to exchange required originator and beneficiary information with…. The question instead describes several esports betting accounts trade bets against each other and cash out through the same device….
Question 50
The financial-crime unit receives this referral: A factoring company finances invoices issued to counterparties with no verified trading history. Which risk is the referral primarily illustrating?
- Merchant misrepresentation and payment-laundering risk
- Fraud and laundering through claims disbursement
- Structuring through an MSB agent network
- Receivables financing based on fictitious trade
- Virtual-asset Travel Rule control gap
Explanation
Correct Answer
D:False invoices can convert unsupported payment claims into apparently legitimate credit proceeds. This classification follows the described behavior; the different example of a payment processor onboards merchants whose websites sell one product but settlement… would raise a different primary exposure.
Incorrect Answers
A:This is not the central mechanism when a factoring company finances invoices issued to counterparties with no verified…; a merchant's visible business may mask payments routed for undisclosed third parties. The alternative requires the facts represented by a payment processor onboards merchants whose websites sell one product but settlement refunds go to…; the principal facts instead show a factoring company finances invoices issued to counterparties with no verified trading history.
B:When testing the contrasting pattern of a factoring company finances invoices issued to counterparties with no verified…, remember that unrelated beneficiaries may receive fabricated or diverted claim proceeds. That mechanism is illustrated by a motor-insurance intermediary sends claim payments to accounts not linked to insured persons or…, not by the stated activity involving a factoring company finances invoices issued to counterparties with no verified trading history.
C:Splitting remittances may conceal aggregate value and evade monitoring thresholds; the observed record here instead involves a factoring company finances invoices issued to counterparties with no verified…. A case of a money remitter's agent repeatedly breaks large customer transfers into many nearby transactions would support that classification; here the relevant evidence is a factoring company finances invoices issued to counterparties with no verified trading history.
E:The relevant alternative mechanism is different from a factoring company finances invoices issued to counterparties with no verified…: Covered transfers may require identifying information to accompany or be available with transfers under local implementation. This would change the core risk being assessed from a factoring company finances invoices issued to counterparties with no verified trading history to a virtual-asset provider fails to exchange required originator and beneficiary information with….