Free CGSS Practice Test Questions and Answers (2026)

The scenario presents a conflict between a legal obligation to complete a transaction (e.g., under an irrevocable letter of credit) and a regulatory obligation to address suspicion of illicit activity (counterfeiting). The appropriate action is to balance these duties. The bank should process the transaction to meet its legal commitment, thereby avoiding a breach of contract. Concurrently, it must escalate the suspicious findings internally to its financial intelligence unit (FIU) or equivalent compliance function. This unit will then conduct a deeper investigation and determine whether to file a Suspicious Activity Report (SAR) or Suspicious Transaction Report (STR) with the relevant authorities. This "process and report" approach fulfills both legal and anti-financial crime obligations.

B. Blocking the transaction is incorrect as it violates the stated legal obligation. Blocking is typically reserved for confirmed matches against a specific sanctions list (e.g., OFAC SDN), not for red flags of other crimes.

C. Notifying the customer of identified red flags constitutes "tipping off," a prohibited action in most jurisdictions that could compromise a law enforcement investigation.

D. Rejecting the transaction is inappropriate as it contravenes the bank's legal obligation to complete it. Rejection is a distinct action from blocking and is not the standard procedure for handling suspicion alone.

1. ACAMS Certified Global Sanctions Specialist (CGSS) Study Guide, 2nd Edition. Chapter 5, "Responding to a Potential Sanctions Violation," outlines the internal escalation process. It details that upon identifying red flags that do not constitute a confirmed sanctions match requiring a block or reject, the matter should be escalated to the compliance or financial intelligence unit for further review and potential reporting, while contractual obligations may still need to be met.

2. The Wolfsberg Group, "Trade Finance Principles" (2019). Section 3, "Policies and Procedures," emphasizes that financial institutions must have procedures for identifying and escalating transactions that exhibit red flags for financial crime. This supports the internal referral to a specialized unit (FIU) for investigation, which is the core of the correct answer.

3. Financial Action Task Force (FATF), "Guidance on Counter-Proliferation Financing" (2018). Paragraph 68 discusses the importance of reporting suspicious transactions to the Financial Intelligence Unit (FIU) without tipping off the customer. This reinforces the reporting aspect of the correct answer and the prohibition noted in option C.

Effective sanctions screening of payment messages requires a comprehensive analysis of all data fields that could identify a sanctioned party, location, or activity. The primary parties to the transaction, the remitter and beneficiary (A), are the most critical fields to screen. Additionally, all other entities involved in the payment chain, such as agents, intermediaries, and financial institutions (B), must be screened to prevent facilitation. Finally, free text fields (E) are crucial as they can contain unstructured data, such as the names of sanctioned vessels, cities, or alternative party names, which would not be captured by screening only the structured party fields.

C. Currency and notional value of the transaction: These fields are not screened against sanctions lists, which contain names of individuals, entities, and locations, not transactional values or currency types.

D. Effective day of the payment: The date of a transaction is a data point for record-keeping and timing, not an identifier that is matched against a sanctions list.

F. Sender's internal payment reference number: This is an internal tracking number for the originating institution and does not contain information about external parties or activities relevant to sanctions compliance.

---

1. ACAMS Certified Global Sanctions Specialist (CGSS) Study Guide, 2nd Edition.

Chapter 3: Sanctions Screening, Section: "What to Screen," pp. 68-70. This section explicitly states that screening must cover all parties to a transaction, including the originator, beneficiary, and any intermediary financial institutions. It also emphasizes the critical importance of screening unstructured data within free-text fields to identify hidden sanctions risks, such as references to sanctioned ports, vessels, or goods.

2. The Wolfsberg Group, "Payment Transparency Standards," October 2017.

Section: "Principles," p. 2. The document outlines that Payment Message Standards require the inclusion of the originator and beneficiary. It further states, "Each FI in the payment chain... should be able to apply its sanctions screening and other AML/CFT controls to the payment messages that it receives." This confirms the need to screen all parties (A, B) in the payment chain.

3. Financial Action Task Force (FATF), "International Standards on Combating Money Laundering and the Financing of Terrorism & Proliferation," The FATF Recommendations, October 2021.

Recommendation 16: Wire Transfers, Interpretive Note, p. 79. This recommendation mandates that originator and beneficiary information accompany wire transfers. It states, "Countries should ensure that financial institutions... monitor wire transfers for the purpose of detecting those which lack required originator and/or beneficiary information and take appropriate measures." This underpins the fundamental requirement to screen remitter and beneficiary data (A).

The primary responsibility of the compliance analyst is to ensure the firm does not breach sanctions regulations. The documentation provided suggests a material change in the ownership structure of Entity A, potentially taking it outside the scope of the asset freeze based on the UK's 'more than 50%' ownership rule. However, this divestment occurred after the individual was sanctioned, which is a high-risk indicator. The analyst cannot take this documentation at face value. The first and most critical step is to conduct enhanced due diligence (EDD) to verify the authenticity of the documents and the legitimacy of the share transfer, ensuring it was not a sham transaction designed to circumvent sanctions.

A. Allowing the transaction based on unverified documentation is a significant compliance failure and exposes the company to the risk of a sanctions violation.

C. Rejecting the transaction immediately is premature. The analyst must first establish the facts, as the entity may no longer be subject to sanctions if the divestment is legitimate.

D. This is the most negligent option. It not only approves the transaction based on unverified data but also removes future controls, creating a severe and ongoing compliance risk.

---

1. Office of Financial Sanctions Implementation (OFSI), HM Treasury. Financial Sanctions Guidance. June 2022.

Section 3.6, Page 18: States, "OFSI expects you to carry out your own due diligence and risk assessment on the basis of the facts and information available to you... You should not rely solely on a designated person’s or an entity’s own assessment of whether they are owned or controlled by a designated person." This directly supports the need for independent verification (i.e., enhanced due diligence) rather than accepting provided documentation at face value.

Chapter 3, Pages 17-20: Details the principles of ownership and control, establishing the 'more than 50%' rule. The scenario hinges on whether this threshold is now legitimately met, which necessitates verification.

2. The Wolfsberg Group. Guidance on Sanctions Screening. 2019.

Section 5.1, Page 16: Emphasizes that alert investigation requires a "thorough investigation" to determine if an alert is a true match. It states that the process should be "supported by appropriate research from reliable and independent sources." This reinforces the principle that an analyst's first step upon receiving new information is to investigate and verify it, which aligns with conducting EDD.

Red flags for sanctions and AML risk often involve activities designed to obscure the origin of funds, beneficial ownership, or the true purpose of a transaction. Privately held companies (Option B) offer less transparency than public ones, and routing international transfers through institutions in jurisdictions unrelated to the company's registration is a classic method for layering funds and concealing their nexus to a sanctioned party. Similarly, new accounts (Option C) with a sudden, unexplained influx of value from high-risk jurisdictions are a significant red flag, suggesting that assets are being moved rapidly to evade newly imposed sanctions, especially without a clear economic or business rationale.

A. Publicly traded corporate vehicles: These are generally lower risk due to stringent regulatory oversight, public disclosure requirements, and transparent ownership structures, which are contrary to the characteristics of a red flag.

D. Established accounts that send or receive funds from non-sanctioned institutions or institutions active on SWIFT: Transacting with non-sanctioned entities via SWIFT is standard, legitimate international business practice and does not, by itself, indicate heightened risk.

E. Regulated entities with a clear web presence with a verifiable business background: These attributes indicate transparency and legitimacy, making the entity a lower risk. Red flags are typically associated with a lack of transparency.

1. ACAMS Certified Global Sanctions Specialist (CGSS) Study Guide, 6th Edition. Chapter 4, "Sanctions Evasion Typologies," details common evasion techniques. It highlights the use of front and shell companies (often privately held) to obscure ownership and the movement of funds through third countries to conceal the ultimate origin or destination, which directly supports option B. It also discusses unusual transaction patterns, such as sudden high-volume activity, as a key indicator, supporting option C.

2. Financial Crimes Enforcement Network (FinCEN). "FinCEN Advises Financial Institutions to Be Vigilant for Potential Russian Sanctions Evasion Attempts" (FIN-2022-A001), March 7, 2022. This advisory explicitly lists red flags for sanctions evasion, including:

"Use of legal entities, such as shell companies... to conduct international wire transfers, often involving financial institutions in jurisdictions distinct from the company’s country of registration" (supports Option B).

"New accounts that are experiencing a sudden rise in the value and volume of transactions, without a clear business rationale" (supports Option C).

3. Financial Action Task Force (FATF). Guidance on Countering Proliferation Financing, February 2018. Section 3, "Risk Indicators," pp. 18-22, identifies several red flags relevant to sanctions evasion. It notes the use of front or shell companies that have no clear commercial purpose and transactions that are routed through several countries or financial institutions for no apparent business reason, aligning with the scenario in option B.

EU sanctions regulations consistently define their jurisdictional scope. This scope applies to: (1) the territory of the EU, (2) any aircraft or vessel under the jurisdiction of an EU Member State, (3) any national of a Member State, wherever they are located, and (4) any legal person, entity, or body incorporated or constituted under the law of a Member State, regardless of where they conduct business.

Option A falls under the principle of jurisdiction over Member State vessels. Option E falls under the principle of jurisdiction over legal persons constituted under the law of a Member State, irrespective of their physical location.

B. Minority ownership (45%) by an EU national in a non-EU company does not automatically confer EU jurisdiction over that company; the threshold is typically over 50% ownership or control.

C. Double taxation conventions are fiscal agreements and are irrelevant to the application of EU foreign policy sanctions.

D. A Customs Union agreement does not automatically extend the legal application of EU sanctions into the territory of a non-EU country.

1. ACAMS. (2023). Certified Global Sanctions Specialist (CGSS) Study Guide. Chapter 3: The European Union Sanctions Regime, Section: "Scope of EU Sanctions." The guide explicitly states that EU sanctions apply to any legal person, entity, or body incorporated or constituted under the law of a Member State, and on board any aircraft or vessel under the jurisdiction of a Member State.

2. Council of the European Union. (2014). Council Regulation (EU) No 269/2014 of 17 March 2014 concerning restrictive measures in respect of actions undermining or threatening the territorial integrity, sovereignty and independence of Ukraine. Official Journal of the European Union, L 78/6. Article 13, Paragraph 1, specifies the regulation shall apply "(b) on board any aircraft or any vessel under the jurisdiction of a Member State; ... (d) to any legal person, entity or body, inside or outside the territory of the Union, which is incorporated or constituted under the law of a Member State".

3. European Commission. (n.d.). Restrictive measures (sanctions). Section: "Who must comply with EU sanctions?". The official guidance confirms that sanctions apply to "EU nationals or legal persons, entities or bodies incorporated or constituted under the law of an EU Member State, both inside and outside the territory of the EU."

According to the UK's Office of Financial Sanctions Implementation (OFSI), an entity is considered owned or controlled by a designated person if one of several conditions is met. While ownership is often associated with shareholding (the threshold for which is more than 50%), the concept of control is equally important. One of the explicit tests for control is whether the person holds the right, directly or indirectly, to appoint or remove a majority of the board of directors of the entity. This right confers significant influence over the entity's strategic decisions and operations, thereby meeting the criteria for control under the UK sanctions regime.

A. The threshold for ownership based on shares or voting rights under the UK sanctions regime is more than 50%, not exactly 50%.

B. While a power of attorney grants authority, it is not one of the specific, standalone tests for ownership or control defined in the OFSI guidance.

D. The "more than 25%" threshold is associated with the UK's Persons with Significant Control (PSC) register, a different legal framework, not the OFSI's test for sanctions purposes.

1. HM Treasury, Office of Financial Sanctions Implementation. OFSI General Guidance for Financial Sanctions Under the Sanctions and Anti-Money Laundering Act 2018. (July 2023). Chapter 4: Ownership and Control, Section 4.2, page 17. This document explicitly states: "A person (P) will be considered to own or control a company, in the simplest terms, if P... holds the right, directly or indirectly, to appoint or remove a majority of the board of directors of the company."

2. ACAMS. Certified Global Sanctions Specialist (CGSS) Study Guide, 6th Edition. Chapter 3: The Sanctions Landscape. The guide details the ownership and control tests for major sanctions regimes, including the UK's "more than 50%" rule for ownership and the separate prongs for control, such as the ability to appoint or remove a majority of the board.

3. UK Parliament, House of Commons Library. Briefing Paper Number 8394: UK sanctions policy. (21 March 2024). Section 3.3: Who is subject to sanctions? This paper clarifies the "owned or controlled" provision under the Sanctions and Anti-Money Laundering Act 2018 (SAMLA), confirming the tests for control include the right to appoint or remove a majority of the board of directors.

The Office of Foreign Assets Control (OFAC) operates within the U.S. legal framework, which upholds the right to legal counsel. To balance sanctions enforcement with these fundamental rights, OFAC issues general licenses authorizing the provision of certain legal services to sanctioned parties. This ensures that designated persons can challenge their designation, defend themselves in legal proceedings, or receive advice on compliance with U.S. law. However, a critical limitation is that these legal services must not be used to facilitate transactions or activities that are otherwise prohibited by the sanctions program.

B. This is too narrow; general licenses for legal services are not restricted to matters involving UN sanctions but cover a broad range of U.S. legal and administrative proceedings.

C. The Bureau of Industry and Security (BIS) is a separate agency from OFAC with a different mandate (export controls); OFAC does not issue licenses to facilitate BIS supervision.

D. A corporate monitor is a potential outcome of a Justice Department settlement, not the foundational reason why OFAC permits legal services for all sanctions targets from the outset.

1. ACAMS CGSS Study Guide (Second English Edition), Chapter 4: Sanctions Evasion and Enforcement, Section: "Licensing," p. 4-18. The guide explains that general licenses authorize categories of transactions, such as the provision of legal services, that are considered essential or do not conflict with the policy goals of the sanctions program, thereby allowing sanctioned persons access to the U.S. legal system.

2. U.S. Department of the Treasury, Office of Foreign Assets Control. Code of Federal Regulations, Title 31, Part 560 (Iranian Transactions and Sanctions Regulations), § 560.525, "Certain legal services authorized." This regulation provides a specific example of a general license authorizing legal services, stating it allows for representation in U.S. proceedings but explicitly prohibits using these services to facilitate prohibited transactions. This structure is common across many OFAC sanctions programs.

3. U.S. Department of the Treasury, Office of Foreign Assets Control. "Guidance on the Provision of Certain Services Relating to the Requirements of U.S. Sanctions Laws" (September 19, 2014). This document clarifies that U.S. persons, including attorneys, may provide services to sanctioned persons related to understanding and complying with U.S. sanctions, underscoring the principle of allowing access to legal advice on U.S. law.

Disabling the Automatic Identification System (AIS) on vessels is a well-documented deceptive practice used to evade sanctions. This tactic, often referred to as "going dark," intentionally conceals a vessel's location and voyage data from monitoring systems. Malign actors use this method to engage in prohibited activities, such as illicit ship-to-ship transfers of sanctioned cargo (e.g., oil, coal) or making covert port calls in sanctioned countries. Regulatory bodies, like the U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC), explicitly identify AIS manipulation as a primary red flag for potential sanctions evasion and illicit maritime trade.

A. Transshipments are a standard, legitimate logistics practice for transferring cargo between vessels and are not inherently deceptive.

B. Refueling at a port in a prohibited country is a direct sanctions violation itself, rather than a deceptive practice to conceal an activity.

D. Chartering an entire vessel to one client is a common and legitimate commercial arrangement in the shipping industry.

1. U.S. Department of the Treasury, Office of Foreign Assets Control (OFAC). (2020, May 14). Guidance to Address Illicit Shipping and Sanctions Evasion Practices. Section: "Deceptive Shipping Practices," Subsection 1, "Disabling or Manipulating the Automatic Identification System (AIS) on Vessels." This advisory explicitly states, "One of the most common ways bad actors try to hide their illicit conduct is by disabling their AIS transponders."

2. United Nations Security Council. (2021, March 4). Final report of the Panel of Experts established pursuant to resolution 1874 (2009) (Report No. S/2021/216). Paragraphs 65-71. The report details numerous instances of Democratic People’s Republic of Korea (DPRK) vessels disabling their AIS to conduct illicit ship-to-ship transfers of petroleum products and coal, demonstrating it as a core sanctions evasion technique.

Automated sanctions screening tools operate by comparing customer data against official sanctions lists. The most crucial data elements for achieving an accurate match and minimizing false positives are the customer's full name (the primary identifier), date of birth, and a unique government-issued identification number (e.g., passport or national ID). These specific data points are standard fields on major sanctions lists, such as the U.S. Office of Foreign Assets Control's (OFAC) Specially Designated Nationals (SDN) List, and are essential for distinguishing the customer from other individuals who may have similar names.

B. Location: While critical for assessing geographic sanctions risk, location can be less precise for identifying a specific individual compared to a unique ID number or date of birth.

D. Account number: This is an internal identifier created by the financial institution; it does not appear on external sanctions lists and is not used for initial screening.

E. Employer of an existing customer: The employer is a secondary attribute of the customer and is not a primary identifier used for matching against sanctions lists.

1. ACAMS Certified Global Sanctions Specialist (CGSS) Study Guide, 6th Edition. Chapter 3, "Sanctions Screening," details the critical data elements for effective screening. It emphasizes that core identifiers such as name, date of birth, and identification numbers are fundamental inputs for screening systems to match against sanctions list entries.

2. The Wolfsberg Group, "Guidance on Sanctions Screening," 2019. Section 11 (page 6) states, "The quality and availability of data is a key component of an effective and efficient screening process... Key data used for screening customers and transactions includes, but is not limited to... for natural persons: full name(s), including aliases; date of birth; address; nationality; and country of residence/incorporation." This highlights the primacy of name, DOB, and identifying attributes like nationality, which are often confirmed via ID numbers.

3. U.S. Department of the Treasury, Office of Foreign Assets Control (OFAC). "A Framework for OFAC Compliance Commitments." May 2, 2019. Page 6 discusses the importance of collecting quality data for screening, stating that a compliance program should "ensure that its sanctions list screening tool is screening relevant parties against an appropriate and up-to-date sanctions list... The quality of the data will greatly influence the effectiveness of a screening tool." The data fields on the SDN list itself, which include name, DOB, and various ID numbers, confirm their importance.

An effective sanctions compliance program (SCP) must be comprehensive and integrated throughout an organization's operations. The correct approach is to apply screening to all business activities to identify and mitigate sanctions risks wherever they may arise. This includes, but is not limited to, customers, transactions, vendors, supply chain partners, third-party intermediaries, and employees. Limiting the scope of screening to specific areas, such as only customers, creates significant compliance gaps and exposes the organization to the risk of violations and severe penalties. A holistic, risk-based approach covering all business lines is a fundamental expectation of regulators.

A. Exclude vendors and other intermediaries from the screening.

This is incorrect because vendors and intermediaries represent a significant third-party risk and can be used, wittingly or unwittingly, to circumvent sanctions.

B. Include only customers and their transactions in the screening.

This scope is too narrow. A comprehensive SCP must also address risks from suppliers, beneficial owners, employees, and other third parties involved in business operations.

D. Exclude beneficial owners of distributors from the screening.

This is incorrect as it directly contravenes regulations like OFAC's 50 Percent Rule, which mandates that entities owned 50% or more by sanctioned parties are also considered blocked.

1. ACAMS Certified Global Sanctions Specialist (CGSS) Study Guide, 2nd Edition. Chapter 4, "Sanctions Compliance Programs," emphasizes that an effective SCP requires a holistic risk assessment covering all business areas, including customers, products, services, and geographic locations. It explicitly states the need to screen third parties like vendors and intermediaries.

2. U.S. Department of the Treasury, Office of Foreign Assets Control (OFAC). (2019). A Framework for OFAC Compliance Commitments. Section C, "Internal Controls," states that an effective SCP includes policies and procedures to "identify, interdict, escalate, report... and keep records pertaining to activity that may be prohibited." This implicitly covers all business activities, and the framework explicitly mentions screening customers, supply chain, intermediaries, and counterparties.

3. Wolfsberg Group. (2019). Guidance on Sanctions Screening. This guidance document for financial institutions recommends that screening should be applied to customers, related parties (including beneficial owners), transactions, and third-party providers to manage sanctions risk effectively across the organization. (See Section II: "Where to Screen").

The aircraft maintenance industry poses the highest sanctions risk due to its direct exposure to entities and activities frequently targeted by international sanctions. This sector involves high-value assets and dual-use goods (e.g., aircraft parts) that are subject to strict export controls. State-owned airlines from sanctioned jurisdictions, such as Iran and North Korea, are often explicitly designated on sanctions lists. Financial institutions providing acquiring services to an aircraft maintenance company face a significant risk of processing payments related to services or goods for a sanctioned entity, leading to severe regulatory penalties.

A. Pharmacy: While online pharmacies can pose risks if shipping to sanctioned countries, the overall inherent sanctions risk is significantly lower than that of the aviation sector.

C. Digital currency provider: This sector is high-risk for sanctions evasion due to anonymity. However, the aviation industry is directly and specifically targeted by numerous sanctions programs, making the risk more acute.

D. Retail company: This is generally considered a low-risk industry unless it is involved in exporting specific controlled goods or knowingly trading with sanctioned jurisdictions.

1. ACAMS CGSS Study Guide (English), First Edition. Chapter 4, "Sanctions Evasion and Detection," details high-risk industries and typologies. The transportation sector, particularly aviation and shipping, is highlighted due to its role in moving goods and its frequent involvement with state-owned enterprises from sanctioned countries and the potential for handling dual-use items.

2. U.S. Department of the Treasury, Office of Foreign Assets Control (OFAC). (2019, July 23). Iran-Related Civil Aviation Industry Advisory. This advisory explicitly warns the civil aviation industry of the potential for sanctions exposure when providing services, including maintenance, to Iranian airlines. It details how designated Iranian airlines use the industry to transport illicit goods, creating direct sanctions risk for service providers (p. 1-3).

3. Financial Action Task Force (FATF). (2020). Guidance on Proliferation Financing Risk Assessment and Mitigation. This guidance identifies sectors vulnerable to proliferation financing, which is intrinsically linked to sanctions. The report notes that industries involved in dual-use goods, such as advanced components found in the aviation sector, are at high risk of being exploited to evade sanctions and export controls (p. 25, Section 65).

According to the U.S. Department of the Treasury's regulations governing sanctions programs, a financial institution must report any blocked property to the Office of Foreign Assets Control (OFAC) within 10 business days from the date the property was blocked. This requirement is stipulated in the Code of Federal Regulations (CFR). The report must provide comprehensive details about the blocked assets and the sanctioned party involved. This timely reporting is crucial for the effective administration and enforcement of U.S. sanctions programs, ensuring that OFAC has up-to-date information on assets frozen pursuant to its directives.

B. 11 business days: This is incorrect. The mandated reporting period is explicitly set at 10 business days, not 11.

C. 13 business days: This is incorrect. The regulation does not specify a 13-business-day timeframe for reporting blocked assets.

D. 14 business days: This is incorrect. While some regulatory reports have a 14-day or two-week timeline, the specific requirement for OFAC blocking reports is 10 business days.

1. U.S. Department of the Treasury. (2023). 31 C.F.R. § 501.603 - Reports on blocked and unblocked property. Code of Federal Regulations. Section: § 501.603(b)(1)(i) states, "Any U.S. person...holding property blocked pursuant to this chapter shall file a report on blocked property with OFAC within 10 business days of the property becoming blocked."

2. Association of Certified Anti-Money Laundering Specialists. (2023). Certified Global Sanctions Specialist (CGSS) Study Guide. Chapter 4: Sanctions Evasion and Violations. The guide details the operational requirements for sanctions compliance, including the 10-business-day reporting rule for blocked assets to OFAC.

An effective sanctions compliance program (SCP) is built upon several fundamental pillars, as outlined by key regulatory bodies and industry standards. Senior management commitment is paramount, as it establishes the "tone at the top," ensures adequate resources, and promotes a culture of compliance. Testing and auditing are crucial for independently verifying that the program's controls are designed correctly and operating effectively, allowing for continuous improvement. Finally, a comprehensive training program is essential to ensure that all relevant employees understand their responsibilities, the sanctions risks pertinent to their roles, and the organization's policies and procedures for mitigating those risks. These three elements are universally recognized as core components of a robust SCP.

A. Politically exposed persons identification: This is a specific due diligence control, primarily associated with anti-corruption and AML efforts, rather than a foundational element of the entire sanctions program framework.

C. Loss prevention: This is a positive business outcome or goal of a successful compliance program (i.e., avoiding fines), not a structural component of the program itself.

D. De-centralized compliance functions: This describes a specific organizational structure, which is not a required element. Many regulators prefer a centralized function to ensure consistency and oversight.

1. U.S. Department of the Treasury, Office of Foreign Assets Control (OFAC). (2019). A Framework for OFAC Compliance Commitments. Page 1. This official guidance explicitly lists "Management Commitment," "Testing and Auditing," and "Training" as three of the five essential components of a sanctions compliance program.

2. ACAMS. (2023). Certified Global Sanctions Specialist (CGSS) Study Guide. Chapter 4: Essential Components of a Sanctions Compliance Program. The guide details the core pillars of an effective SCP, which include senior management commitment, testing/auditing, and training, aligning directly with the correct answers.

3. Financial Action Task Force (FATF). (2021). Guidance on Proliferation Financing Risk Assessment and Mitigation. Paragraph 108. While focused on proliferation financing, this guidance reinforces the need for ongoing employee training and an independent audit function as key components of an effective compliance program to mitigate sanctions-related risks.

Generating productive alerts requires focusing screening systems on relevant, high-quality data to minimize false positives. The Wolfsberg Group guidance supports this by recommending two core practices. First, financial institutions should consider excluding certain low-risk parties (e.g., specific government entities, internal accounts) from screening to concentrate resources on higher-risk areas. Second, maintaining data hygiene is crucial. This involves regularly reviewing and removing data that is no longer relevant for risk assessment, such as a former address or a closed account, from the screening population. Both principles help ensure that the alerts generated are more meaningful and warrant investigation, thereby improving the overall effectiveness and efficiency of the sanctions screening program.

A. The guidance promotes automated, efficient, and comprehensive screening; relying on manual processes and narrowly limiting screening by jurisdiction runs counter to these principles.

C. A "good guy" list is specifically used to suppress known common false positives, not to avoid suppressing them, thereby increasing alert productivity.

D. Reducing the threshold settings from an optimal level would increase the volume of alerts, including false positives, which is the opposite of creating more productive alerts.

1. The Wolfsberg Group. (2019). Guidance on Sanctions Screening. Page 11, Section 4.3, "Data". This section explicitly supports both correct answers:

For option B: "FIs should consider what data is relevant for screening and what data may be excluded (e.g. internal or suspense accounts, or certain types of government entities)."

For option E: "FIs should also consider whether certain data should be removed from screening on an ongoing basis once it is no longer relevant (e.g. a former address)."

2. The Wolfsberg Group. (2019). Guidance on Sanctions Screening. Page 12, Section 4.4, "Tuning". This section refutes options C and D:

For option C: "FIs may also use suppression lists (sometimes referred to as “good guy” lists) to automatically discount alerts against names that have been previously investigated and discounted as false positives."

For option D: The section discusses the importance of setting an "appropriate threshold" to balance effectiveness and efficiency, implying that moving away from an optimal level would be detrimental.

Secondary sanctions are a tool used by the United States to extend the reach of its sanctions programs beyond its direct jurisdiction. They target non-U.S. persons (individuals, entities, or governments) for engaging in specific commercial or financial activities with a primary sanctioned target, even if the transaction itself has no direct connection to the United States. The purpose is to deter foreign actors from undermining U.S. foreign policy objectives by dealing with sanctioned countries or entities, effectively forcing them to choose between doing business with the sanctioned target or with the United States.

A. Sanctions which apply to more than one country: This describes multilateral or comprehensive sanctions, not the specific mechanism of targeting non-jurisdictional persons that defines secondary sanctions.

C. Sanctions which are transferred to a bank through its correspondent banking relationship: This describes a common enforcement vector for sanctions, but it is not the definition of secondary sanctions themselves.

D. When an entity has been sanctioned for the second time: This is an incorrect, literal interpretation of the word "secondary" and does not describe this specific type of sanctions measure.

1. ACAMS Certified Global Sanctions Specialist (CGSS) Study Guide, 6th Edition, Chapter 2: Sanctions Regimes and Their Key Components, Section: "Primary vs. Secondary Sanctions." The guide explains that secondary sanctions are "designed to apply to non-US persons who are outside of US jurisdiction" and are used to "prevent third parties from engaging in trade or other transactions with a sanctioned country."

2. U.S. Department of the Treasury, Office of Foreign Assets Control (OFAC), "Frequently Asked Questions." OFAC's guidance on various programs, such as those related to Iran or Russia, defines secondary sanctions as measures that can be imposed on foreign persons for engaging in certain conduct outside of U.S. jurisdiction. For example, FAQ 563 on Iran states that non-U.S. persons may be exposed to secondary sanctions for certain transactions with Iranian persons.

3. Congressional Research Service (CRS), "U.S. Sanctions: An Overview," Report R45415, (Updated October 22, 2021), page 2. The report defines secondary sanctions as those that "are intended to restrict the economic activity of non-U.S. persons, even when that activity occurs entirely outside U.S. jurisdiction... to dissuade non-U.S. persons from engaging in activities that are contrary to U.S. interests."

According to the Wolfsberg Group's risk-based approach, a financial institution's (FI) risk appetite is the most important factor in developing its sanctions compliance framework, including an in-house screening system. The risk appetite defines the level of sanctions risk the FI is willing to accept and sets the strategic direction for the entire program. It directly influences the design, scope, calibration (e.g., fuzzy logic thresholds), and governance of the screening system to ensure it is appropriately tailored to the FI's specific risk profile and tolerance levels. All other factors are components that are assessed and managed in alignment with this overarching strategic decision.

A. data quality: While critical for the operational effectiveness of a screening system, data quality is an input factor, not the primary strategic driver for its development.

B. geographical presence: This is a key input into the sanctions risk assessment, but the overall risk appetite determines how the risks associated with geography are managed.

D. information technology capabilities: These are practical enablers or constraints for building the system, but they do not define the system's fundamental design, purpose, or stringency.

1. The Wolfsberg Group, "Guidance on Sanctions Screening," 2019.

Section 2, "Governance and Oversight," Page 5: "The Board and Senior Management are responsible for setting the FI’s risk appetite for sanctions... The sanctions screening framework should be designed and implemented in a manner that is consistent with the FI’s established sanctions risk appetite." This establishes risk appetite as the foundational element guiding the framework's design.

Section 3, "Risk Assessment," Page 6: "An FI should take a risk-based approach (RBA) to designing and implementing its sanctions screening framework... The RBA should be proportionate to the FI’s specific inherent sanctions risks and in line with its risk appetite."

2. ACAMS, "Certified Global Sanctions Specialist (CGSS) Study Guide," 2nd Edition.

Chapter 2, "The Components of a Sanctions Compliance Program": The guide consistently emphasizes that the foundation of any effective sanctions compliance program is a thorough risk assessment and a clearly defined risk appetite approved by senior management. The design of all controls, including screening systems, flows from this initial determination.

Upon freezing the assets of a newly designated individual or entity, a financial institution's primary and immediate obligation is to report the action to the relevant national competent authority (NCA). This reporting is a critical component of the sanctions enforcement framework, as it informs the government about the assets that have been successfully blocked in accordance with the law. This allows authorities to monitor compliance and take further action if necessary. Failing to report a freeze is a serious compliance violation.

A. Notify the customer about the freezing.

This action could be considered "tipping off," potentially hampering wider investigations. The primary legal duty is to report to the authorities, not the sanctioned party.

B. Freeze accounts of the customer's family members that have accounts within the same financial institution.

Sanctions are targeted at listed individuals and entities they own or control. Freezing assets of non-designated family members without a legal basis is an overreach and not a standard requirement.

D. Transfer the funds to another financial institution where the customer has another account.

This is a direct violation of the sanctions. An asset freeze explicitly prohibits any movement, transfer, or dealing with the funds of the sanctioned person.

1. Council of the European Union. (2018). EU Best Practices for the effective implementation of restrictive measures. Document 8519/18.

Page 20, Section V, Paragraph 69: "Operators should, without delay, inform the competent authority of the Member State where they are resident or located of any assets frozen in implementation of the restrictive measures in force and of any authorisation granted, in accordance with the relevant provisions of the legal acts." This directly supports the requirement to inform authorities.

2. Council Regulation (EU) No 269/2014 of 17 March 2014. Concerning restrictive measures in respect of actions undermining or threatening the territorial integrity, sovereignty and independence of Ukraine.

Article 9, Paragraph 2: "Natural or legal persons, entities or bodies shall immediately supply any information which would facilitate compliance with this Regulation, such as information on accounts and amounts frozen in accordance with Article 2, to the competent authorities of the Member States where they are resident or located..." This article establishes the legal obligation to supply information about frozen assets to competent authorities.

3. ACAMS. (2023). Certified Global Sanctions Specialist (CGSS) Study Guide.

Chapter 4: Sanctions Evasion and Investigations: The guide details the process following a confirmed sanctions match, which includes blocking/freezing the transaction or account and then promptly filing a report with the relevant regulatory body (e.g., OFAC in the US, or the respective NCA in the EU). This confirms that reporting is a mandatory step after freezing.

A customer's reluctance to provide information on the end-use or end-user of an item is a significant red flag in sanctions compliance. This behavior suggests the customer may be attempting to conceal the true purpose or ultimate destination of the goods, potentially to divert them to a sanctioned entity, jurisdiction, or for a prohibited purpose, such as weapons proliferation. Verifying the end-use is a critical component of due diligence, especially when dealing with dual-use goods that have both civilian and military applications. Evasiveness on this point directly undermines the ability to assess the legitimacy and compliance of the transaction.

A. The payment is received after the goods are shipped.

This is a common commercial practice known as "open account" trading and is not, by itself, an indicator of sanctions evasion.

B. The product is compatible with the technical level of the country.

This indicates a legitimate transaction. A red flag would be the opposite: shipping highly technical goods to a country lacking the infrastructure to use them.

D. There is an unwillingness to offer information on the goods’ expiration date.

This is primarily a commercial or logistical concern rather than a direct sanctions red flag, unless combined with other suspicious indicators.

1. ACAMS Certified Global Sanctions Specialist (CGSS) Study Guide, Chapter 4: Sanctions Evasion and Countermeasures. The guide lists customer-related red flags, including "The customer is evasive or reluctant to provide information about the end-user or end-use of the goods." This is identified as a key indicator of potential diversion or illicit activity.

2. U.S. Department of Commerce, Bureau of Industry and Security (BIS), "Know Your Customer Guidance." This official guidance provides a list of "Red Flag Indicators" for export controls and sanctions. It explicitly states, "The customer is reluctant to offer information on the end-use of the item" as a red flag that requires further inquiry.

3. The Wolfsberg Group, "The Wolfsberg Group, ICC and BAFT Trade Finance Principles," 2019 Update, Page 11, Section 3.2. The principles emphasize the need for financial institutions to understand the underlying transaction, including the goods involved. A customer's refusal to provide details about the goods' use would prevent this level of due diligence and be considered a significant risk indicator.

Sanctions evasion schemes exploit complex international financial systems. Trade finance is a high-risk channel due to its reliance on documentation (e.g., bills of lading, invoices) that can be falsified to hide the involvement of sanctioned parties, goods, or jurisdictions. Correspondent banking relationships are critical for accessing the global financial system and can be abused to process payments for sanctioned entities, often through nested accounts in jurisdictions with weaker controls. Shell companies are fundamental tools used to create opaque corporate structures, obscuring beneficial ownership and the true origin or destination of funds, thereby facilitating illicit transactions through various banking channels.

A. Corporate banking: This is a broad category of services, not a specific evasion channel. Evasion occurs through specific products within this category.

C. Online banking: This is a service delivery method, not a primary channel for the complex, large-scale schemes typical of sanctions evasion.

D. Retail banking: While possible for smaller-scale evasion, it is not a common channel for major, sophisticated sanctions circumvention schemes.

---

1. ACAMS Certified Global Sanctions Specialist (CGSS) Study Guide, 2nd Edition. Chapter 3, "Sanctions Evasion Techniques," details the use of shell companies, trade finance manipulation, and the exploitation of correspondent banking as primary methods for sanctions circumvention.

2. Financial Action Task Force (FATF). (2020). Guidance on Proliferation Financing Risk Assessment and Mitigation. This guidance identifies shell companies and complex corporate structures as key vulnerabilities (p. 21) and highlights the abuse of international trade and correspondent banking as channels for evading sanctions (pp. 24-26).

3. The Wolfsberg Group. (2022). Statement on Effectiveness. The statement emphasizes the importance of controls over high-risk areas, including correspondent banking and trade finance, which are recognized as significant channels for illicit financial activities like sanctions evasion.

4. U.S. Department of the Treasury. (2024). 2024 National Risk Assessments on Money Laundering, Terrorist Financing, and Proliferation Financing. The report identifies the misuse of legal entities like shell companies (p. 29) and the exploitation of correspondent banking services (p. 21) as primary vulnerabilities for illicit finance, including sanctions evasion.

Transliteration is the systematic process of converting text from one writing system (script) into another. It involves mapping the characters of a source script to functionally equivalent characters in a target script based on spelling. In the context of sanctions compliance, this is essential for screening names that originate in non-Latin alphabets (e.g., Arabic, Cyrillic, Mandarin) against sanctions lists, which are often in Latin script. This process helps account for variations in spelling that arise when a single name is converted into another script using different standards, thereby improving the accuracy of the screening process.

A. This describes naming conventions or aliases, which are different ways a name is used, not how it is written in different scripts.

B. This defines Romanization, which is a specific type of transliteration (to Latin script), but not the complete, general definition.

C. This describes the overall process of sanctions list screening, not the specific linguistic technique of transliteration used within it.

1. ACAMS Certified Global Sanctions Specialist (CGSS) Study Guide, 6th Edition. Chapter 3, "Screening for Sanctions, PEPs, and Adverse Media," Section: "Data and Matching Challenges," pp. 3-24 - 3-25. The guide defines transliteration as "the conversion of text from one script to another" and distinguishes it from translation and transcription.

2. Knight, K., & Graehl, J. (1998). Machine Transliteration. Computational Linguistics, 24(4), 599–612. Section 1, "Introduction," defines transliteration as the process of converting a word from one alphabetic script to another, focusing on the phonetic and orthographic mapping between writing systems. (Available via MIT Press and ACM Digital Library).