Trade Finance BD · Original revision handnote · Edition 2026.1
FCC — Financial Crime and Compliance
AIBB · Optional · 14 October 2026
Identify financial-crime risks, apply proportionate controls and preserve a defensible investigation trail.
Use this revision pack with the full syllabus and official papers. Important topics are revision priorities, not a promise of future questions.
Contents
- A · Financial-crime foundations
- B · Fraud and internal controls
- C · Enterprise financial-crime risk
- D · Due diligence and monitoring
- E · Sanctions, bribery and conflicts
- F · Digital financial crime
- G · Compliance governance
- Worked example
- Applied case and model response
- Terminology
- Official syllabus and papers
Revision priorities
CDD, beneficial ownership, TBML and reporting — Syllabus priority. Editorial judgement based on syllabus importance.
Sanctions and digital financial-crime controls — Syllabus priority. Editorial judgement based on syllabus importance.
Syllabus-mapped handnotes
Module A
Financial-crime foundations
Syllabus scope: ML; TF; sanctions; bribery; predicate crimes; BFIU; FATF; APG; Egmont
Money laundering disguises criminal proceeds; terrorist financing can involve legitimate or illicit sources. Predicate offences generate proceeds relevant to the laundering framework. FATF sets international standards; regional bodies assess implementation; financial intelligence units receive and analyse reports within their mandates. Sanctions, bribery and fraud overlap with AML but have distinct obligations. Explain the conduct, risk and control rather than using the labels interchangeably. Placement, layering and integration are a teaching framework; real transactions may not follow a neat three-stage sequence.
Apply it in bankingA salary-funded transfer to a prohibited recipient can raise terrorist-financing or sanctions risk even when the salary’s origin is legitimate.
Practice question: Distinguish money laundering, terrorist financing, sanctions breaches and bribery.
Answer framework: use the explanation above, add the banking example, then address assumptions and controls. Expand to match the question’s marks and command words.
Module B
Fraud and internal controls
Syllabus scope: Deposit/credit/trade fraud; segregation; investigation; operational controls
Fraud involves deception for gain or to cause loss. In banking it may involve false identity, unauthorised transfers, fabricated collateral, duplicate finance or manipulated trade documents. Internal controls reduce opportunity through segregation, access restrictions, independent verification and reconciliation. A control can fail through collusion or management override, so use layered evidence and challenge. Distinguish error from suspected intentional misconduct without prejudging an investigation. Preserve records and restrict disclosure to authorised participants.
Apply it in bankingIf the same invoice supports multiple loans, verify transaction identifiers, delivery and lender arrangements. Duplicate-looking paperwork is an indicator needing investigation, not an automatic conviction.
Practice question: Analyze credit or trade fraud and propose preventive and detective controls.
Answer framework: use the explanation above, add the banking example, then address assumptions and controls. Expand to match the question’s marks and command words.
Module C
Enterprise financial-crime risk
Syllabus scope: Customer/product/geography/channel risk; TBML; enterprise assessment; risk treatment
An enterprise assessment considers inherent exposure, control effectiveness and residual risk across customers, products, geographies and delivery channels. High-risk labels require context and current authoritative lists, not nationality stereotypes. TBML controls compare business profile, ownership, goods, pricing, route, documents and settlement. Product complexity or a third-party payment can obscure economic purpose. Prioritise material exposures and assign action owners. Refresh assessments when business models, external risks or control weaknesses change, rather than treating the annual assessment as a static compliance document.
Apply it in bankingA new cross-border digital product may change customer verification, transaction speed and jurisdictional exposure. Assess it before launch and monitor actual use afterward.
Practice question: Prepare a risk-based financial-crime assessment for a trade-finance product.
Answer framework: use the explanation above, add the banking example, then address assumptions and controls. Expand to match the question’s marks and command words.
Module D
Due diligence and monitoring
Syllabus scope: KYC; CDD/EDD; transaction profile; beneficial owner; screening; monitoring; CTR/STR; confidentiality
CDD establishes customer identity, beneficial ownership, purpose and expected activity. Enhanced measures address higher risk through deeper verification and appropriate oversight. Ongoing monitoring compares actual activity with the known profile and investigates meaningful deviations. Screening checks relevant names and restrictions; transaction monitoring detects unusual patterns. A currency-transaction report and a suspicious-transaction report have different triggers and purposes under local rules. Reporting suspicion does not require proof of the crime. Preserve confidentiality and avoid tipping off while maintaining lawful customer service.
Apply it in bankingA screening name match needs identity resolution. A transaction-profile mismatch needs economic explanation and evidence; these are different investigations.
Practice question: Explain CDD, beneficial ownership and ongoing monitoring in a suspicious-payment review.
Answer framework: use the explanation above, add the banking example, then address assumptions and controls. Expand to match the question’s marks and command words.
Module E
Sanctions, bribery and conflicts
Syllabus scope: UN/other relevant regimes; local implementation; gifts; procurement; conflicts
Sanctions analysis depends on the applicable legal regime, jurisdiction, persons, ownership/control and transaction. A list search alone cannot settle every ownership or end-use question. Bribery risk arises when a benefit seeks improper influence; gifts, procurement and intermediaries require controls proportionate to context. Disclose conflicts and recuse where necessary. Maintain accurate records and independent approvals. Do not assume that foreign sanctions automatically have the same legal force in every jurisdiction; identify their relevance to the transaction and the institution’s obligations.
Apply it in bankingA supplier offers a gift while a procurement decision is pending. Record and handle it under policy, remove the conflict and escalate potential improper influence.
Practice question: Explain sanctions applicability and controls for gifts, procurement and conflicts of interest.
Answer framework: use the explanation above, add the banking example, then address assumptions and controls. Expand to match the question’s marks and command words.
Module F
Digital financial crime
Syllabus scope: Fintech; MFS; e-wallets; platforms; cyber-enabled fraud; controls
Fast digital transfers and remote onboarding can support inclusion while accelerating fraud and laundering patterns. Risks include account takeover, mule accounts, synthetic identities, social engineering and rapid layering through multiple accounts. Controls should balance customer access with identity assurance, device/session monitoring, transaction limits and escalation. Test models and rules for effectiveness and false positives. Digital evidence requires reliable timestamps, access controls and chain-of-custody practices. A sophisticated tool does not replace trained investigators, clear ownership and a sound reporting process.
Apply it in bankingRepeated small credits followed by immediate onward transfers may warrant investigation of business purpose and account control, even when each transfer is below a numerical threshold.
Practice question: Assess financial-crime risks in mobile wallets and recommend proportionate controls.
Answer framework: use the explanation above, add the banking example, then address assumptions and controls. Expand to match the question’s marks and command words.
Module G
Compliance governance
Syllabus scope: Independence; inherent/residual risk; governance; assurance; reporting
Compliance needs authority, competence, resources and access to decision-makers. The business remains responsible for compliant activity; the compliance function advises, monitors and challenges. Independent testing evaluates whether controls work rather than whether policies exist. Management reports should describe material breaches, unresolved cases, control gaps and actions required. Accountability includes deadlines and evidence of remediation. A culture that punishes good-faith escalation increases concealed risk. Residual risk should be accepted only by the appropriate authority and within legal requirements.
Apply it in bankingWhen a profitable customer’s unexplained transactions remain unresolved, escalate the risk instead of lowering its rating to meet a business target.
Practice question: Design an independent compliance framework with meaningful reporting and remediation.
Answer framework: use the explanation above, add the banking example, then address assumptions and controls. Expand to match the question’s marks and command words.
Worked example
Alert effectiveness
A monitoring system produces 400 alerts. Investigators find 80 relevant suspicious cases among them. Independently, 20 additional suspicious cases were missed. Calculate precision and recall using these exercise labels.
- True positives = 80; false positives = 400−80 = 320; false negatives = 20.
- Precision = 80/(80+320) = 20%.
- Recall = 80/(80+20) = 80%.
- High recall with low precision creates investigation workload. Improve data and rules without assuming that fewer alerts always means better control.
Common mistake: These labels describe a practice validation set, not a legal determination of crime.
Case clinic
Unexplained trade pricing and third-party payment
A long-standing importer’s invoice price rises sharply, goods are vaguely described and payment is requested to an unrelated company. Advise Compliance.
Model response
Identify pricing, goods-description and payment-party red flags. Existing customer history does not explain the current transaction by itself.
Obtain specifications, comparable prices with matched terms, ownership/control information and the legal/economic reason for the beneficiary. Verify documents independently and assess applicable sanctions and regulatory requirements.
Escalate unresolved concerns, follow authorised reporting and payment decisions, and preserve the reasoning and evidence. Avoid tipping off and avoid declaring crime merely because the benchmark differs. Review the customer profile and ongoing monitoring.
Practice marking guide · 20 marks- Specific red flags (5)
- Independent evidence and applicability (7)
- Reporting and confidentiality (4)
- Ongoing control (4)
Terminology and comparisons
| Screening / monitoring | Checking identities or restrictions versus assessing activity patterns. |
|---|
| CDD / EDD | Baseline due diligence versus additional measures for higher risk. |
|---|
| Red flag / proof | An indicator to investigate versus evidence establishing an allegation. |
|---|
| CTR / STR | Threshold-based reporting under local rules versus suspicion-based reporting under local rules. |
|---|
Official references
Official papers are linked for comparison; their full text and official model answers are not reproduced. This pack’s explanations, examples and cases are original. Numerical examples are practice assumptions. Current law, instructions and subsequent amendments must be checked for regulatory answers.