A client with many personal and business deposits with the financial institution (Fl) seeks a business loan. The client wants to guarantee the loan with a trust for which they are the beneficiary.
An investigator examines the trust. The trust has many layers, including shell companies in known tax havens. The client's ultimate beneficial ownership claim cannot be validated, and the loan is denied.
Two months later, the Fl receives a law enforcement (LE) request on one of the client's business accounts. While reviewing the business account, the Fl receives another LE request on the same account from another agency. The requested information is shared.
Three months later, a branch manager receives a request to open a business deposit account related to a complex trust. The manager forwarded the request because of the complexity. The trust was the same as the previously examined trust, but the request came from a different client. The second client also has many accounts with the Fl. Further inspection finds links between the second client and the Paradise Papers. The Papers state the client led illegal activities and committed tax evasion.
What steps should the investigator take to review the accounts held by the second client who is listed in the Paradise Papers? (Select Two.)
When crafting internal procedures on writing and submitting SARs/STRs, one should:
A financial institution
Due to an ever-diversifying business model and multi-jurisdictional footprint, a casino has decided to outsource the source of funds and wealth checks to a third-party provider. Why is it important for the casino to maintain control of the output from the provider?
The investigations team of a financial institution (Fl) wants to perform enhanced due diligence measures on operations done by a foreign bank related to transactions of companies that export scrap gold and silver. What would be the next best steps for the investigations team? (Select Two.)
Which main vulnerability has led to an increase in the ransomware attacks perpetuated on small businesses?
SAR/STR NARRATIVE
A SAR/STR has been submitted on five transactions conducted on the correspondent banking relationship with ABC Bank.
Client Information:
Remitter information: DEF Oil Resource Ltd. is the oldest member of the DEF Group. It was founded in 1977 as a general trading business with a primary focus on exports from Africa and North America. The group has business activities that span the entire energy value chain. Their core field of endeavor is centered within the oil and gas industry and its associated sub-sectors.
Beneficiary Information:
As per the response received from ABC Bank, it was determined that the beneficiaries are related to DEF Oil Resource Ltd. These were created by DEF Oil Resource Ltd. to purchase property in a foreign country on behalf of their senior management as part of a bonus scheme. The purpose behind this payment was for the purchase of property in another country.
Payment Reference:
ABCXXXXX31PZFG2H
ABCXXXXXX51PQGEH
ABCXXXXXX214QWVG
ABCXXXXXX41PSXA2
ABCXXXXXX815QWS3
Concerns:
• We are unsure about the country of incorporation of the beneficiaries.
• We are concerned about the transactional activity since the payment made towards entities (conducted on behalf of individuals) appears to be possible tax evasion.
• There appears to be an attempt to conceal the identity of individuals (senior management), which again raises concerns about the source of funds.
• Referring to the response received from ABC Bank, we are unclear about the ultimate beneficiary of funds.
• The remitter is involved in a high-risk business, (i.e., oil and crude products trading), and the beneficiary is involved in real estate business which again poses a higher risk.
When drafting the SAR/STR narrative, the investigator notes several payment references. What additional information should the investigator include in the narrative?
A criminal is engaged in chain hopping while trying to launder ransomware payments. The criminal will likely:
An analyst reviews an alert for high volume Automated Clearing House (ACH) activity in an account. The analyst's initial research finds the account is for a commercial daycare account that receives high volumes of large government-funded ACH transactions to support the programs. The account activity consists of checks (cheques) made payable to individual names in varying dollar amounts. One check indicates rent to another business.
An Internet search finds that the daycare company owner has previous government-issued violations for safety and classroom size needs, such as not having enough chairs and tables per enrollee. These violations were issued to a different daycare name.
Simultaneous to this investigation, another analyst sends an email about negative news articles referencing local child/adult daycare companies misusing governmental grants. This prompts the financial institution (Fl) to search all businesses for names containing daycare' or "care*. Text searches return a number of facilities as customers at the Fl and detects that three of these businesses have a similar transaction flow of high volume government ACH funding with little to no daycare expenses.
During the investigation, new suspicious patterns and trends related to check cashing are observed. The Fl decides to conduct a training to ensure that 1) the AML program is robust and 2) the training program is relevant and appropriate. Which parties should be trained on emerging trends and red flags? (Select Two.)
A client with many personal and business deposits with the financial institution (Fl) seeks a business loan. The client wants to guarantee the loan with a trust for which they are the beneficiary.
An investigator examines the trust. The trust has many layers, including shell companies in known tax havens. The client's ultimate beneficial ownership claim cannot be validated, and the loan is denied.
Two months later, the Fl receives a law enforcement (LE) request on one of the client's business accounts. While reviewing the business account, the Fl receives another LE request on the same account from another agency. The requested information is shared.
Three months later, a branch manager receives a request to open a business deposit account related to a complex trust. The manager forwarded the request because of the complexity. The trust was the same as the previously examined trust, but the request came from a different client. The second client also has many accounts with the Fl. Further inspection finds links between the second client and the Paradise Papers. The Papers state the client led illegal activities and committed tax evasion.
What steps should the investigator perform in reference to the first client's existing accounts? (Select Three.)