Which information is it best practice to share at the very beginning of a well-written SAR/STR narrative?
Which most likely indicates that a business email compromise attack has occurred?
An investigator is reviewing a case generated from the transaction monitoring system, with two large amounts of incoming remittance (IR) to an individual customer. Based on the KYC profile, the customer is a plant manager of a famous multi-national electronics manufacturing firm. As the customer has no similarly large transaction patterns for the past 2 years, the investigator sends an inquiry to the relationship manager (RM) about the nature of the transaction. The RM replies that the transaction is a consultancy fee provided from two different electronics companies with a debit note provided However, there is no detail of service provided on the debit note, and the remitters are two individuals.
Which actions should the investigator recommend to mitigate risk? (Select Two.)
In a SAR/STR narrative concerning Individual A. which statement indicates a product of analysis rather than a fact or judgement?
A financial institution (Fl) banks a money transmitter business (MTB) located in Miami. The MTB regularly initiates wire transfers with the ultimate beneficiary in Cuba and legally sells travel packages to Cuba. The wire transfers for money remittances comply with the country's economic sanctions policies. A Fl investigator on the sanctions team reviews each wire transfer to ensure compliance with sanctions and to monitor transfer details.
An airline located in Cuba, unrelated to the business, legally sells airline tickets in Cuba to Cuban citizens wanting to travel outside of Cuba. The airline tickets are purchased using Cuban currency (CUC).
The MTB wants 100,000 USD worth of CUC. Purchasing CUC from a Cuban bank includes a 4% fee. The MTB contacts the airline to ask if the airline will trade its CUC for USD at a lower exchange fee than the Cuban bank. The airline agrees to a 1% fee. The MTB initiates a wire transfer to the airline which appears as normal activity in the monitoring system because of the business' travel package sales.
The investigator recommends that a SAR/STR be filed. What documentation should be referenced in the SAR/STR filing? (Select Three.)