A criminal is engaged in chain hopping while trying to launder ransomware payments. The criminal will likely:
An investigator is reviewing an alert for unusual activity. System scanning detected a text string within a company customer's account transactions that indicates the account may have been used for a drug or drug paraphernalia purchase. Based on the KYC profile, the investigator determines the customer's company name and business type are marketed as a gardening supplies company. The investigator reviews the account activity and notes an online purchase transaction that leads the investigator to a website that sells various strains of marijuana. Additional account review detects cash deposits into the account at the branch teller lines, so the investigator reaches out to the teller staff regarding the transactions. The teller staff member reports that the business customers have frequently deposited cash in lower amounts. The teller, without prompting, adds that one of the transactors would occasionally smell of a distinct scent of marijuana smoke.
Which information should be included in the SAR/STR?
As part of an internal fraud investigation, an AML officer has decided to interview an employee. Which statement is most consistent with best practices?
An analyst reviews an alert for high volume Automated Clearing House (ACH) activity in an account. The analyst's initial research finds the account is for a commercial daycare account that receives high volumes of large government-funded ACH transactions to support the programs. The account activity consists of checks (cheques) made payable to individual names in varying dollar amounts. One check indicates rent to another business.
An Internet search finds that the daycare company owner has previous government-issued violations for safety and classroom size needs, such as not having enough chairs and tables per enrollee. These violations were issued to a different daycare name.
Simultaneous to this investigation, another analyst sends an email about negative news articles referencing local child/adult daycare companies misusing governmental grants. This prompts the financial institution (Fl) to search all businesses for names containing daycare' or 'care1. Text searches return a number of facilities as customers at the Fl and detects that three of these businesses have a similar transaction flow of high volume government ACH funding with little to no daycare expenses.
During the investigation, it was determined that some of the checks were issued to a mother-in-law of a PEP and deposited into her account with the Fl. This customer was not found on the Fl's PEP list How should the investigator proceed in this situation"? (Select Two.)
Which is the first valid step in the Mutual Legal Assistance Treaties international cooperation process?
A bank investigator notices an account receiving multiple deposits from the same employer under different employees' names. A cash withdrawal occurs one day after each deposit. The outcome of this investigation will likely uncover which crime typology?
An AML investigator at a bank identifies an unusually high number of deposits from a few customers resulting from the encashment of multiple gambling tickets from a legitimate gambling company. It is noted that the transactions are inconsistent with the customers' profiles and that reverse (corrective) transactions did not occur. Which suspicious activity is most likely?
Which are primary purposes of Financial Action Task Force {FATF)-Style Regional Bodies? (Select Two.)
An investigator at a corporate bank is conducting transaction monitoring alerts clearance.
KYC profile background: An entity customer, doing business offshore in Hong Kong, established a banking business relationship with the bank since 2017 for deposit and loan purposes. It acts as an offshore investment holding company. The customer declared that the ongoing source of funds to this account comes from group-related companies.
• X is the UBO. and owns 97% shares of this entity customer;
• Y is is the authorized signatory of this entity customer. This entity customer was previously the subject of a SAR/STR.
KYC PROFILE
Customer Name: AAA International Company. Ltd
Customer ID: 123456
Account Opened: June 2017
Last KYC review date: 15 Nov 2020
Country and Year of Incorporation: The British Virgin Islands, May 2017
AML risk level: High
Account opening and purpose: Deposits, Loans, and Trade Finance
Anticipated account activities: 1 to 5 transactions per year and around 1 million per
transaction amount
During the investigation, the investigator reviewed remittance transactions activities for the period from Jul 2019 to Sep 2021 and noted the following transactions pattern:
TRANSACTION JOURNAL
Review dates: from July 2019 to Sept 2021
For Hong Kong Dollars (HKD) currency:
Incoming transactions: 2 inward remittances of around 1.88 million HKD in total from
different third parties
Outgoing transactions: 24 outward remittances of around 9 4 million HKD in total to
different third parties
For United States Dollars (USD) currency:
Incoming transactions: 13 inward remittances of around 3.3 million USD in total from
different third parties
Outgoing transactions: 10 outward remittances of around 9.4 million USD in total to
different third parties.
RFI Information and Supporting documents:
According to the RFI reply received on 26 May 2021, the customer provided the bank
with the information below:
1J All incoming funds received in HKD & USD currencies were monies lent from non-customers of the bank. Copies of loan agreements had been provided as supporting documents. All of the loan agreements were in the same format and all the lenders are engaged in trading business.
2) Some loan agreements were signed among four parties, including among lenders. borrower (the bank's customer), guarantor, and guardian with supplemental agreements, which stated that the customer, as a borrower, who failed to repay a loan
Which suspicious activity should the investigator identify during the review of the loan agreements?
A client that runs a non-profit organization that aids refugees in leaving their home countries received a remittance from a money services business that was ten times the average. The client was recently detained for providing falsified passports to illegal immigrants. Which predicate offenses could be considered in the SAR/STR? (Select Two.)
A retail bank prepares a yearly AML risk assessment. Which inherent risk factor is likely the most relevant?
A client at a financial institution deposits large amounts of money into an account, and almost immediately, the funds are then distributed to numerous individuals' accounts. The transaction activity described in the scenario is a pattern of:
A financial institution
Which scenarios are common to money laundering through online marketplaces and trade-based money laundering? (Select Two.)
An investigator receives an alert documenting a series of transactions. A limited liability corporation (LLC) wired 59.000,000 USD to an overseas account associated with a state-run oil company. A second account associated with the state-run oil company wired 600,000,000 USD to the LLC. The LLC then wired money to other accounts, a money brokerage firm, and real estate purchases.
The investigator initiated an enhanced KYC investigation on the LLC. The financial institution opened the LLC account a couple of weeks prior to the series of transactions. The names associated with the LLC had changed multiple times since the account opened. A search of those names revealed relations with multiple LLCs. Public records about the LLCs did not show any identifiable business activities.
Open-source research identified mixed reports about the brokerage firm. The firm indicated it purchased mutual funds for its clients and dispensed returns to clients.
Media reports claimed the firm laundered money by holding for a fee before returning it to investors.
The investigator discovers that the bank has no records pertaining to ownership of the LLC. What would this mean for the bank and/or investigator?
Law enforcement (LE) suspects human trafficking to occur during a major spotting event. LE officers asked several financial institutions (FIs) to monitor financial transactions occurring before, during, and after the event.
An investigator identified a pattern linked to a business. The business* account received multiple even dollar deposits between midnight and 4:00 AM. They occurred each day for several days prior to the date of the sporting event. Also, large cash deposits, typically between 2,000 USD and 3.000 USD. made by a person to the business' account occurred in many branches in the days after the sports event
There was little information about the company. The company did not have any history of employee payroll expenses or paying taxes. Expenses from the business account included air travel and hotel expenses. Searches about the person making cash deposits showed little. An online social media platform webpage with the individual's name showed ads for dates" and "companionship."
If the investigator uncovers evidence that foreign nationals are involved in this activity, they should also note the possible presence of:
During transaction monitoring. Bank A learns that one of their customers. Med Supplies 123. is attempting to make a payment via wire totaling 382,500 USD to PPE Business LLC located in Mexico to purchase a large order of personal protective equipment. specifically surgical masks and face shields. Upon further verification. Bank A decides to escalate and refers the case to investigators.
Bank A notes that, days prior to the above transaction, the same customer went to a Bank A location to wire 1,215,280 USD to Breath Well LTD located in Singapore. Breath Well was acting as an intermediary to purchase both 3-ply surgical masks and face shields from China. Bank A decided not to complete the transaction due to concerns with the involved supplier in China. Moreover, the customer is attempting to send a third wire in the amount of 350,000 USD for the purchase of these items, this time using a different vendor in China. The investigator must determine next steps in the investigation and what actions, if any. should be taken against relevant parties.
During the investigation, Bank A receives a USA PATRIOT Act Section 314(a) request related to Med Supplies 123. Which steps should the investigator take when fulfilling the request? (Select Three.)
Which are some of the negative impacts from illegal wildlife trade and environmental crimes? (Select Two.)
Which actions should financial institutions perform to ensure proper data governance? (Select Three.)
A client with many personal and business deposits with the financial institution (Fl) seeks a business loan. The client wants to guarantee the loan with a trust for which they are the beneficiary.
An investigator examines the trust. The trust has many layers, including shell companies in known tax havens. The client's ultimate beneficial ownership claim cannot be validated, and the loan is denied.
Two months later, the Fl receives a law enforcement (LE) request on one of the client's business accounts. While reviewing the business account, the Fl receives another LE request on the same account from another agency. The requested information is shared.
Three months later, a branch manager receives a request to open a business deposit account related to a complex trust. The manager forwarded the request because of the complexity. The trust was the same as the previously examined trust, but the request came from a different client. The second client also has many accounts with the Fl. Further inspection finds links between the second client and the Paradise Papers. The Papers state the client led illegal activities and committed tax evasion.
What steps should the investigator perform in reference to the first client's existing accounts? (Select Three.)
Which information is it best practice to share at the very beginning of a well-written SAR/STR narrative?
Which most likely indicates that a business email compromise attack has occurred?
An investigator is reviewing a case generated from the transaction monitoring system, with two large amounts of incoming remittance (IR) to an individual customer. Based on the KYC profile, the customer is a plant manager of a famous multi-national electronics manufacturing firm. As the customer has no similarly large transaction patterns for the past 2 years, the investigator sends an inquiry to the relationship manager (RM) about the nature of the transaction. The RM replies that the transaction is a consultancy fee provided from two different electronics companies with a debit note provided However, there is no detail of service provided on the debit note, and the remitters are two individuals.
Which actions should the investigator recommend to mitigate risk? (Select Two.)
In a SAR/STR narrative concerning Individual A. which statement indicates a product of analysis rather than a fact or judgement?
A financial institution (Fl) banks a money transmitter business (MTB) located in Miami. The MTB regularly initiates wire transfers with the ultimate beneficiary in Cuba and legally sells travel packages to Cuba. The wire transfers for money remittances comply with the country's economic sanctions policies. A Fl investigator on the sanctions team reviews each wire transfer to ensure compliance with sanctions and to monitor transfer details.
An airline located in Cuba, unrelated to the business, legally sells airline tickets in Cuba to Cuban citizens wanting to travel outside of Cuba. The airline tickets are purchased using Cuban currency (CUC).
The MTB wants 100,000 USD worth of CUC. Purchasing CUC from a Cuban bank includes a 4% fee. The MTB contacts the airline to ask if the airline will trade its CUC for USD at a lower exchange fee than the Cuban bank. The airline agrees to a 1% fee. The MTB initiates a wire transfer to the airline which appears as normal activity in the monitoring system because of the business' travel package sales.
The investigator recommends that a SAR/STR be filed. What documentation should be referenced in the SAR/STR filing? (Select Three.)