ACAMS CAMS Practice Test Questions Answers

 Before disclosing any supporting documentation for a suspicious transaction report (STR) to a law enforcement agency, the financial institution should confirm thatthe request is legitimate and authorized by verifying the identity and credentials of the requester1. This is to prevent unauthorized access or misuse of the confidential information by impostors or fraudsters. The other options are not true, as they may either compromise the security, integrity, or timeliness of the disclosure, or violate the confidentiality or privacy rights of the customer.

ACAMS, CAMS Examination Study Guide, 6th Edition, Chapter 4, p. 117

FATF Guidance: The Role of Hawala and Other Similar Service Providers in Money Laundering and Terrorist Financing, October 20132, p. 20

Basel Committee on Banking Supervision, Sound management of risks related to money laundering and financing of terrorism, June 20173, p. 11

"Transaction Monitoring Systems and Ongoing Monitoring: Since the transactional monitoring system is key to mitigating ML risk within the bank, the Committee recognizes that AML risks require more than just appropriate policies and procedures; banks must have adequate and appropriate monitoring systems. For most banks, this will involve an IT monitoring system. If the bank does not believe it needs an IT monitoring system, it should document the rationale for why it does not need one.

REPORTING OF SUSPICIOUS TRANSACTIONS [https://www.fatf- gafi.org/media/fatf/documents/recommendations/pdfs/FATF%20Recommendations%202012.pdf] If a financial institution suspects or has reasonable grounds to suspect that funds are the proceeds of a criminal activity, or are related to terrorist financing, it should be required, by law, to report promptly its suspicions to the financial intelligence unit (FIU). According to the Financial Action Task Force‘s (FATF) Recommendation 20, a suspicious transaction report (STR) or a suspicious activity report (SAR) is filed by a financial institution or, by a concerned citizen, to the local Financial Intelligence Unit if they have reasonable grounds to believe that a transaction is related to criminal activity. [https://aml-cft.net/library/suspicious-transaction-report-str-suspicious-activity-report-sar/]

The activities that could be considered a potential spear phishing scam are:

A courier delivers a duplicate invoice to a business that contains updated payment details of an existing supplier. This could be a way of diverting funds to a fraudulent account by impersonating a legitimate vendor and exploiting the trust relationship between the business and the supplier1.

Payroll receives an external email from an employee looking to update their bank account information. This could be a way of stealing money from the employee or the employer by pretending to be the employee and requesting a change in the payment method or destination2.

An employee receives an email that asks to download an attachment, but the attachment is a malware. This could be a way of infecting the employee’s computer or network with malicious software that could compromise sensitive data, disrupt operations, or demand ransom3.

The other options are not necessarily spear phishing scams, although they may be other types of fraud or deception. For example:

An employee receives a phone call requesting that money be sent to assist someone in trouble. This could be a vishing scam, which is a form of voice phishing that uses phone calls to solicit personal or financial information or to request money transfers4.

A business sends its employees an email warning that email passwords must be changed to prevent cyber-fraud. This could be a legitimate security measure, or it could be a phishing scam, which is a form of email phishing that targets a broad audience and tries to trick them into revealing their credentials or clicking on malicious links.

Members of a religious organization receive a donation request by email claiming to be from their leader. This could be a genuine appeal, or it could be a social engineering scam, which is aform of manipulation that exploits the human factor and relies on the victim’s emotions, trust, or sympathy.

A customer who is nervous, uneasy, or in a hurry to cash a large cashier’s check may be trying to launder money or evade reporting requirements. The teller should complete the transaction as normal, but also flag the customer’s account for further monitoring and review. The teller should look for any unusual or suspicious patterns of activity, such as frequent large cash transactions, transfers to or from high-risk jurisdictions, or transactions that do not match the customer’s profile or expected behavior. The teller should also document the transaction and the customer’s demeanor, and report any findings or concerns to the appropriate authority within the bank.

The teller should not confer with the bank’s account going forward, as this may alert the customer to the bank’s suspicion or compromise the investigation. The teller should not file a SAR on the customer, unless there are other grounds to suspect money laundering or terrorist financing, as this may be premature or unnecessary. The teller should not file a CTR on the customer by the end of the day, unless the transaction exceeds the threshold of $10,000, as this is a legal requirement for cash transactions in the US.

[ACAMS Study Guide for the CAMS Certification Examination, 6th Edition], Chapter 4: Conducting or Supporting the Investigation Process, pp. 103-104, 107-108.

Suspicious Activity Reporting - Overview, Federal Financial Institutions Examination Council, April 2018, pp. 1-2, 4-5.

Currency Transaction Reporting - Overview, Federal Financial Institutions Examination Council, April 2018, pp. 1-2, 4-5.

17 AML Analyst Interview Questions and Answers, CLIMB, July 15, 2022.