Controls for Conflict Zones and Dual-Use Goods
5 minutes
5 Questions
Within the CAMS framework of Controls, Investigations and the AFC Organization, controls for conflict zones and dual-use goods address the heightened risk that financial institutions may facilitate sanctions evasion, proliferation financing, terrorist financing, or trade-based money laundering. Conflict zones—such as regions under embargo, active armed conflict, or control by sanctioned or terrorist groups—present elevated risk because governance is weak, cash economies dominate, and legitimate trade is often intertwined with illicit flows (e.g., conflict minerals, smuggled oil, or looted antiquities). Dual-use goods are items with both civilian and military applications, such as certain chemicals, electronics, machine tools, navigation equipment, and materials usable in weapons of mass destruction. Export control regimes like the Wassenaar Arrangement, the EU Dual-Use Regulation, and the US Export Administration Regulations govern them. Effective controls begin with risk assessment: identifying customers, counterparties, products, and corridors tied to conflict-affected jurisdictions or dual-use trade. Enhanced due diligence (EDD) should establish beneficial ownership, end-user, and end-use information, and verify export licenses where applicable. Trade finance units must scrutinize documentation—bills of lading, invoices, Harmonized System codes, vessel and port data—for red flags such as mismatched goods descriptions, circuitous shipping routes, transshipment through high-risk hubs, over/under-invoicing, or front companies with no logical business rationale. Screening should extend beyond sanctions lists to include export-control entity lists, denied parties, and vessel tracking. Transaction monitoring scenarios should be calibrated for payments to or from conflict-adjacent countries, unusual freight forwarders, and sudden changes in trading patterns. Investigators must document rationale, escalate through the financial crime compliance structure, and file suspicious activity reports when warranted, while coordinating with sanctions, export compliance, and legal teams. Governance requires clear ownership by senior management, training for front-line and trade staff, and periodic independent testing. Ultimately, these controls protect the institution from regulatory penalties and reputational harm while preventing it from becoming a conduit for weapons proliferation or financing of violence.
Controls for Conflict Zones and Dual-Use Goods: A Complete CAMS Study Guide
Why This Topic Matters
Within the CAMS domain on Controls, Investigations, and the AFC Organization, controls for conflict zones and dual-use goods sit at the intersection of anti-money laundering (AML), counter-terrorist financing (CTF), sanctions compliance, and export controls. Financial institutions are a critical chokepoint: weapons, components, and funds that flow into conflict regions almost always pass through the formal financial system at some point, whether through trade finance, correspondent banking, wire transfers, or letters of credit.
Regulators and international bodies, including the FATF, the UN Security Council, the EU, OFAC, and national export-control authorities, expect institutions to recognize that legitimate-looking trade can disguise the movement of goods that fuel armed conflict, proliferation of weapons of mass destruction (WMD), terrorism, and gross human rights abuses. Failures in this area have resulted in some of the largest enforcement penalties in history, reputational collapse, and loss of correspondent relationships. For the exam, this topic tests whether you can connect sanctions knowledge, trade-based money laundering (TBML) red flags, and risk-based control design into a coherent framework.
What Are Conflict Zones and Dual-Use Goods?
Conflict zones are geographic areas experiencing armed conflict, civil war, insurgency, or severe political instability. They are frequently subject to UN, EU, or national sanctions and arms embargoes. Characteristics that make them high-risk for AFC purposes include:
• Weak or collapsed state institutions and rule of law
• Presence of terrorist organizations, militias, or sanctioned regimes
• Heavy reliance on cash, informal value transfer systems (hawala), and cross-border smuggling
• Exploitation of natural resources (so-called conflict minerals such as tin, tantalum, tungsten, and gold, as well as diamonds, oil, and timber) to fund armed groups
• Diversion of humanitarian aid and remittances
• Use of neighboring countries as transshipment or financial intermediary hubs
Dual-use goods are items, software, and technology that have both legitimate civilian applications and potential military, security, or WMD applications. Classic examples include:
• Certain chemicals and precursors (e.g., used in fertilizers but also explosives or chemical weapons)
• Machine tools, centrifuges, and high-precision manufacturing equipment
• Night-vision devices, thermal imaging cameras, drones, and GPS components
• Specialized valves, pumps, and alloys usable in nuclear or missile programs
• Encryption software, semiconductors, and advanced electronics
• Biological agents and laboratory equipment
Dual-use items are regulated under frameworks such as the Wassenaar Arrangement, the Nuclear Suppliers Group, the Australia Group (chemical and biological), and the Missile Technology Control Regime, and implemented domestically through lists such as the EU Dual-Use Regulation and the US Commerce Control List administered by the Bureau of Industry and Security (BIS). UN Security Council Resolution 1540 obligates states to prevent non-state actors from acquiring WMD-related materials, and the FATF has issued specific guidance on proliferation financing, which it formally added to its Recommendations (Recommendation 1 and 7) requiring countries and institutions to assess and mitigate proliferation financing risk.
How the Risks Manifest in Financial Institutions
Illicit actors rarely approach a bank and declare an intent to ship missile components to a sanctioned regime. Instead, they exploit layers of concealment:
1. Trade finance abuse: Letters of credit, documentary collections, and open-account trade carry goods descriptions that can be vague, mislabeled, or falsified. A shipment of "industrial pumps" or "laboratory equipment" may conceal export-controlled items.
2. Front and shell companies: Procurement networks establish companies in third countries (often free-trade zones or jurisdictions with weak beneficial ownership transparency) to purchase goods on behalf of a sanctioned end user. The ultimate end user and end use are hidden.
3. Transshipment and diversion: Goods are legally exported to an intermediary country, then re-exported or smuggled to the prohibited destination. Shipping routes that are economically illogical are a key signal.
4. Payment structuring and third-party payers: Payments arrive from entities unrelated to the stated buyer, from high-risk jurisdictions, or are broken into amounts that avoid scrutiny thresholds.
5. Exploitation of humanitarian channels: NGOs operating in conflict zones can be used, wittingly or unwittingly, to move funds or goods to armed groups. FATF Recommendation 8 addresses non-profit organization risk while cautioning against de-risking legitimate humanitarian activity.
6. Correspondent banking blind spots: A respondent bank in a region adjacent to a conflict zone may process transactions the correspondent cannot fully see, creating nested or indirect exposure.
How Controls Work: A Layered Framework
Effective controls follow the risk-based approach and operate across the customer lifecycle.
Risk assessment and governance
• Incorporate geographic risk (conflict zones, sanctioned countries, embargoed regions, and their neighbors) and product risk (trade finance, correspondent banking, cross-border payments) into the enterprise-wide risk assessment.
• Explicitly assess proliferation financing and sanctions evasion risk as required by FATF.
• Ensure board and senior management oversight, clear policies, and a designated compliance function with authority to block or exit relationships.
Customer due diligence (CDD) and enhanced due diligence (EDD)
• Identify and verify beneficial ownership to detect front companies.
• Understand the nature of the customer's business: Does the company plausibly need the goods it trades? Does a small trading company with no technical staff order precision machine tools?
• Apply EDD to customers dealing in dual-use goods, operating in or near conflict zones, or involved in sectors such as defense, aerospace, chemicals, mining, and logistics.
• Screen customers, directors, beneficial owners, and counterparties against sanctions lists, denied-party lists (e.g., BIS Entity List, OFAC SDN List, EU consolidated list, UN lists), and adverse media.
• Obtain end-user and end-use certificates where appropriate for trade finance transactions.
Transaction and trade-based controls
• Screen all parties to a trade transaction: applicant, beneficiary, shippers, vessels, ports, and banks.
• Review goods descriptions against dual-use control lists and ensure Harmonized System (HS) codes match the description.
• Check for pricing anomalies (over- or under-invoicing), quantity discrepancies, and duplicate invoicing.
• Scrutinize shipping routes and vessel behavior, including AIS (Automatic Identification System) gaps, flag changes, ship-to-ship transfers, and calls at sanctioned ports.
• Monitor for payments from third parties, unusual currency choices, or round-dollar amounts inconsistent with commercial pricing.
• Apply geographic filters that capture not only the conflict zone itself but known transshipment hubs.
Ongoing monitoring and investigation
• Calibrate transaction-monitoring scenarios for TBML and sanctions evasion typologies.
• Investigate alerts holistically, linking KYC data, transaction patterns, open-source intelligence, and trade documentation.
• File suspicious activity reports (SARs/STRs) and, where applicable, blocked-property or rejected-transaction reports to sanctions authorities.
• Escalate potential export-control violations; cooperate with law enforcement and export-control agencies.
Training and culture
• Train front-line trade finance, relationship management, and operations staff on dual-use red flags, because they are often the first to see documentation.
• Ensure staff understand that export-control compliance and AML/sanctions compliance are interdependent.
Key Red Flags to Memorize
• Customer is reluctant to provide end-user or end-use information
• Goods ordered are inconsistent with the buyer's business or technical capability
• Freight forwarder is listed as the final destination or consignee
• Shipping route is circuitous or economically illogical
• Customer pays cash or offers to pay above market price for sensitive items
• Delivery destination is a free-trade zone or transshipment hub near a sanctioned or conflict country
• Vague goods descriptions ("spare parts," "equipment") on high-value letters of credit
• Payments originate from a third party unrelated to the transaction
• Buyer declines routine installation, training, or warranty services
• Company has minimal online presence, recently incorporated, or shares addresses with other shell entities
• Vessel exhibits AIS gaps or recent name and flag changes
Exam Tips: Answering Questions on Controls for Conflict Zones and Dual-Use Goods
1. Think risk-based, not prohibition-based. The CAMS exam rewards answers that apply enhanced due diligence and heightened scrutiny proportionate to risk. An answer that says "refuse all business with any company near a conflict zone" is usually wrong because it reflects indiscriminate de-risking, which FATF discourages. Look for options involving EDD, end-user verification, and escalation.
2. Remember that dual-use does not mean prohibited. Many questions test whether you understand that dual-use goods are legal to trade with proper licenses and legitimate end users. The control is to verify end use and end user, not to block the goods automatically.
3. Connect the dots across domains. Questions often blend sanctions screening, TBML red flags, and proliferation financing. If a scenario mentions a letter of credit, a free-trade zone, and vague goods descriptions, the examiner wants you to recognize combined trade-finance and sanctions-evasion risk and to recommend document review plus screening of all parties.
4. Identify the "best" action, not just a correct one. When asked what a compliance officer should do first, prioritize gathering information and escalating internally (EDD, documentation review, consultation with sanctions or export-control teams) before terminating a relationship or filing a report. Tipping off the customer is always wrong.
5. Know the key frameworks by name and purpose. Be able to distinguish the Wassenaar Arrangement (conventional arms and dual-use), the Australia Group (chemical and biological), the Nuclear Suppliers Group, the MTCR, and UNSCR 1540. Also recall that FATF explicitly requires assessment of proliferation financing risk.
6. Recognize transshipment logic. If a scenario describes goods shipped to a country that has no apparent need for them and that neighbors a sanctioned state, the examiner is signaling diversion. Choose the answer that addresses the ultimate destination.
7. Watch for third-party payment clues. Any scenario where payment comes from an entity other than the buyer, especially from a different jurisdiction, is a red flag for sanctions evasion or front-company activity.
8. Humanitarian scenarios require balance. If a question involves an NGO operating in a conflict zone, the correct answer typically involves risk-based due diligence and monitoring to allow legitimate aid while mitigating diversion risk, rather than blanket refusal.
9. Distinguish reporting obligations. Sanctions matches may require blocking or rejecting the transaction and reporting to the sanctions authority, while suspicious patterns short of a confirmed match require a SAR/STR. Export-control violations may also need referral to export authorities. Read the question carefully to see which obligation is being tested.
10. Eliminate extreme answers. Options containing words like "always," "never," "immediately terminate," or "ignore" are rarely correct. The exam favors measured, documented, escalated responses grounded in the institution's risk appetite and regulatory requirements.
Summary
Controls for conflict zones and dual-use goods require institutions to understand who is behind a transaction, what is really being shipped, where it is ultimately going, and why the commercial logic makes sense. By combining robust CDD and beneficial ownership verification, comprehensive sanctions and denied-party screening, trade document scrutiny, intelligent transaction monitoring, and well-trained staff, institutions can detect and disrupt the financing of conflict and proliferation. For the CAMS exam, master the red flags, the international frameworks, the risk-based philosophy, and the correct sequence of escalation and reporting, and you will be well positioned to answer any question in this area.
Within the CAMS domain on Controls, Investigations, and the AFC Organization, controls for conflict zones and dual-use goods sit at the intersection of anti-money laundering (AML), counter-terrorist financing (CTF), sanctions compliance, and export controls. Financial institutions are a critical chokepoint: weapons, components, and funds that flow into conflict regions almost always pass through the formal financial system at some point, whether through trade finance, correspondent banking, wire transfers, or letters of credit.
Regulators and international bodies, including the FATF, the UN Security Council, the EU, OFAC, and national export-control authorities, expect institutions to recognize that legitimate-looking trade can disguise the movement of goods that fuel armed conflict, proliferation of weapons of mass destruction (WMD), terrorism, and gross human rights abuses. Failures in this area have resulted in some of the largest enforcement penalties in history, reputational collapse, and loss of correspondent relationships. For the exam, this topic tests whether you can connect sanctions knowledge, trade-based money laundering (TBML) red flags, and risk-based control design into a coherent framework.
What Are Conflict Zones and Dual-Use Goods?
Conflict zones are geographic areas experiencing armed conflict, civil war, insurgency, or severe political instability. They are frequently subject to UN, EU, or national sanctions and arms embargoes. Characteristics that make them high-risk for AFC purposes include:
• Weak or collapsed state institutions and rule of law
• Presence of terrorist organizations, militias, or sanctioned regimes
• Heavy reliance on cash, informal value transfer systems (hawala), and cross-border smuggling
• Exploitation of natural resources (so-called conflict minerals such as tin, tantalum, tungsten, and gold, as well as diamonds, oil, and timber) to fund armed groups
• Diversion of humanitarian aid and remittances
• Use of neighboring countries as transshipment or financial intermediary hubs
Dual-use goods are items, software, and technology that have both legitimate civilian applications and potential military, security, or WMD applications. Classic examples include:
• Certain chemicals and precursors (e.g., used in fertilizers but also explosives or chemical weapons)
• Machine tools, centrifuges, and high-precision manufacturing equipment
• Night-vision devices, thermal imaging cameras, drones, and GPS components
• Specialized valves, pumps, and alloys usable in nuclear or missile programs
• Encryption software, semiconductors, and advanced electronics
• Biological agents and laboratory equipment
Dual-use items are regulated under frameworks such as the Wassenaar Arrangement, the Nuclear Suppliers Group, the Australia Group (chemical and biological), and the Missile Technology Control Regime, and implemented domestically through lists such as the EU Dual-Use Regulation and the US Commerce Control List administered by the Bureau of Industry and Security (BIS). UN Security Council Resolution 1540 obligates states to prevent non-state actors from acquiring WMD-related materials, and the FATF has issued specific guidance on proliferation financing, which it formally added to its Recommendations (Recommendation 1 and 7) requiring countries and institutions to assess and mitigate proliferation financing risk.
How the Risks Manifest in Financial Institutions
Illicit actors rarely approach a bank and declare an intent to ship missile components to a sanctioned regime. Instead, they exploit layers of concealment:
1. Trade finance abuse: Letters of credit, documentary collections, and open-account trade carry goods descriptions that can be vague, mislabeled, or falsified. A shipment of "industrial pumps" or "laboratory equipment" may conceal export-controlled items.
2. Front and shell companies: Procurement networks establish companies in third countries (often free-trade zones or jurisdictions with weak beneficial ownership transparency) to purchase goods on behalf of a sanctioned end user. The ultimate end user and end use are hidden.
3. Transshipment and diversion: Goods are legally exported to an intermediary country, then re-exported or smuggled to the prohibited destination. Shipping routes that are economically illogical are a key signal.
4. Payment structuring and third-party payers: Payments arrive from entities unrelated to the stated buyer, from high-risk jurisdictions, or are broken into amounts that avoid scrutiny thresholds.
5. Exploitation of humanitarian channels: NGOs operating in conflict zones can be used, wittingly or unwittingly, to move funds or goods to armed groups. FATF Recommendation 8 addresses non-profit organization risk while cautioning against de-risking legitimate humanitarian activity.
6. Correspondent banking blind spots: A respondent bank in a region adjacent to a conflict zone may process transactions the correspondent cannot fully see, creating nested or indirect exposure.
How Controls Work: A Layered Framework
Effective controls follow the risk-based approach and operate across the customer lifecycle.
Risk assessment and governance
• Incorporate geographic risk (conflict zones, sanctioned countries, embargoed regions, and their neighbors) and product risk (trade finance, correspondent banking, cross-border payments) into the enterprise-wide risk assessment.
• Explicitly assess proliferation financing and sanctions evasion risk as required by FATF.
• Ensure board and senior management oversight, clear policies, and a designated compliance function with authority to block or exit relationships.
Customer due diligence (CDD) and enhanced due diligence (EDD)
• Identify and verify beneficial ownership to detect front companies.
• Understand the nature of the customer's business: Does the company plausibly need the goods it trades? Does a small trading company with no technical staff order precision machine tools?
• Apply EDD to customers dealing in dual-use goods, operating in or near conflict zones, or involved in sectors such as defense, aerospace, chemicals, mining, and logistics.
• Screen customers, directors, beneficial owners, and counterparties against sanctions lists, denied-party lists (e.g., BIS Entity List, OFAC SDN List, EU consolidated list, UN lists), and adverse media.
• Obtain end-user and end-use certificates where appropriate for trade finance transactions.
Transaction and trade-based controls
• Screen all parties to a trade transaction: applicant, beneficiary, shippers, vessels, ports, and banks.
• Review goods descriptions against dual-use control lists and ensure Harmonized System (HS) codes match the description.
• Check for pricing anomalies (over- or under-invoicing), quantity discrepancies, and duplicate invoicing.
• Scrutinize shipping routes and vessel behavior, including AIS (Automatic Identification System) gaps, flag changes, ship-to-ship transfers, and calls at sanctioned ports.
• Monitor for payments from third parties, unusual currency choices, or round-dollar amounts inconsistent with commercial pricing.
• Apply geographic filters that capture not only the conflict zone itself but known transshipment hubs.
Ongoing monitoring and investigation
• Calibrate transaction-monitoring scenarios for TBML and sanctions evasion typologies.
• Investigate alerts holistically, linking KYC data, transaction patterns, open-source intelligence, and trade documentation.
• File suspicious activity reports (SARs/STRs) and, where applicable, blocked-property or rejected-transaction reports to sanctions authorities.
• Escalate potential export-control violations; cooperate with law enforcement and export-control agencies.
Training and culture
• Train front-line trade finance, relationship management, and operations staff on dual-use red flags, because they are often the first to see documentation.
• Ensure staff understand that export-control compliance and AML/sanctions compliance are interdependent.
Key Red Flags to Memorize
• Customer is reluctant to provide end-user or end-use information
• Goods ordered are inconsistent with the buyer's business or technical capability
• Freight forwarder is listed as the final destination or consignee
• Shipping route is circuitous or economically illogical
• Customer pays cash or offers to pay above market price for sensitive items
• Delivery destination is a free-trade zone or transshipment hub near a sanctioned or conflict country
• Vague goods descriptions ("spare parts," "equipment") on high-value letters of credit
• Payments originate from a third party unrelated to the transaction
• Buyer declines routine installation, training, or warranty services
• Company has minimal online presence, recently incorporated, or shares addresses with other shell entities
• Vessel exhibits AIS gaps or recent name and flag changes
Exam Tips: Answering Questions on Controls for Conflict Zones and Dual-Use Goods
1. Think risk-based, not prohibition-based. The CAMS exam rewards answers that apply enhanced due diligence and heightened scrutiny proportionate to risk. An answer that says "refuse all business with any company near a conflict zone" is usually wrong because it reflects indiscriminate de-risking, which FATF discourages. Look for options involving EDD, end-user verification, and escalation.
2. Remember that dual-use does not mean prohibited. Many questions test whether you understand that dual-use goods are legal to trade with proper licenses and legitimate end users. The control is to verify end use and end user, not to block the goods automatically.
3. Connect the dots across domains. Questions often blend sanctions screening, TBML red flags, and proliferation financing. If a scenario mentions a letter of credit, a free-trade zone, and vague goods descriptions, the examiner wants you to recognize combined trade-finance and sanctions-evasion risk and to recommend document review plus screening of all parties.
4. Identify the "best" action, not just a correct one. When asked what a compliance officer should do first, prioritize gathering information and escalating internally (EDD, documentation review, consultation with sanctions or export-control teams) before terminating a relationship or filing a report. Tipping off the customer is always wrong.
5. Know the key frameworks by name and purpose. Be able to distinguish the Wassenaar Arrangement (conventional arms and dual-use), the Australia Group (chemical and biological), the Nuclear Suppliers Group, the MTCR, and UNSCR 1540. Also recall that FATF explicitly requires assessment of proliferation financing risk.
6. Recognize transshipment logic. If a scenario describes goods shipped to a country that has no apparent need for them and that neighbors a sanctioned state, the examiner is signaling diversion. Choose the answer that addresses the ultimate destination.
7. Watch for third-party payment clues. Any scenario where payment comes from an entity other than the buyer, especially from a different jurisdiction, is a red flag for sanctions evasion or front-company activity.
8. Humanitarian scenarios require balance. If a question involves an NGO operating in a conflict zone, the correct answer typically involves risk-based due diligence and monitoring to allow legitimate aid while mitigating diversion risk, rather than blanket refusal.
9. Distinguish reporting obligations. Sanctions matches may require blocking or rejecting the transaction and reporting to the sanctions authority, while suspicious patterns short of a confirmed match require a SAR/STR. Export-control violations may also need referral to export authorities. Read the question carefully to see which obligation is being tested.
10. Eliminate extreme answers. Options containing words like "always," "never," "immediately terminate," or "ignore" are rarely correct. The exam favors measured, documented, escalated responses grounded in the institution's risk appetite and regulatory requirements.
Summary
Controls for conflict zones and dual-use goods require institutions to understand who is behind a transaction, what is really being shipped, where it is ultimately going, and why the commercial logic makes sense. By combining robust CDD and beneficial ownership verification, comprehensive sanctions and denied-party screening, trade document scrutiny, intelligent transaction monitoring, and well-trained staff, institutions can detect and disrupt the financing of conflict and proliferation. For the CAMS exam, master the red flags, the international frameworks, the risk-based philosophy, and the correct sequence of escalation and reporting, and you will be well positioned to answer any question in this area.
Test mode:
CAMS - Controls for Conflict Zones and Dual-Use Goods Example Questions
Test your knowledge of Controls for Conflict Zones and Dual-Use Goods
Question 1
In export control and proliferation financing controls, what does the term dual-use goods refer to?
Question 2
A bank's trade finance controls screen all named parties against sanctions lists and generate an alert when a goods description matches a dual-use keyword list. A look-back review finds that several alerts on export-controlled electronic components were closed because the stated destination was a neighbouring, non-sanctioned jurisdiction. The goods then reached a conflict zone by transshipment after the consignee was amended. Which control weakness BEST explains these misses?
Question 3
A trade finance analyst reviews a letter of credit for a customer exporting machinery parts to a newly formed distributor in a state bordering an active conflict zone. The goods description is vague, but the customs codes match items on a dual-use control list. Name screening of all parties returned no hits. What should the analyst do NEXT before the transaction proceeds?
Unlock Premium Access
Certified Anti-Money Laundering Specialist
- Access to ALL Certifications: Study for any certification on our platform with one subscription
- 2954 Superior-grade Certified Anti-Money Laundering Specialist practice questions
- Unlimited practice tests across all certifications
- Detailed explanations for every question
- CAMS: 5 full exams plus all other certification exams
- 30-Day Money-Back Guarantee: Full refund within 30 days if unsatisfied
- Risk-Free: 7-day free trial with all premium features!
More Controls for Conflict Zones and Dual-Use Goods questions
17 questions (total)
Other Controls, Investigations and the AFC Organization concepts
AFC Training and Awareness ProgramsControls for High-Risk Products and ChannelsControls for PEPs and Complex Ownership StructuresCustomer Offboarding Decisions and DocumentationDe-Risking and Financial Inclusion Trade-OffsDocumenting Investigations and the Decision to ReportEmployee Due Diligence and Insider ThreatsEscalation Through the Governance StructureEU AML Regulation and COSMIC Information SharingFinCEN 314(a) and 314(b) Information SharingFront Office Roles in Detecting Financial CrimeIdentifying Unusual and Suspicious ActivityInvestigation Techniques and Information GatheringInvestigation Timelines and Continuing Activity ReviewsPrivacy, Cybersecurity and Other Supporting FunctionsRed Flags from Staff Reports and External SourcesRequests for Information and Customer CommunicationResponding to Subpoenas and Law Enforcement RequestsStructure and Roles of the Financial Crime TeamTipping Off and Confidentiality of ReportsVendor and Third-Party Due DiligenceWriting a Suspicious Activity Report