Fraud and Its Relationship to Money Laundering

Overview
This guide covers the topic Fraud and Its Relationship to Money Laundering, part of the CAMS exam domain on Risks and Methods of Money Laundering and Terrorist Financing. It explains why fraud matters so much to AML professionals, what fraud is, how fraud proceeds are laundered, the typologies and red flags you must recognise, and how to approach exam questions on this subject with confidence.

1. Why This Topic Is Important
Fraud is one of the most common and highest-volume predicate offenses for money laundering worldwide. Every successful fraud produces criminal proceeds, and those proceeds are useless to the criminal until they can be moved, disguised and spent. In other words, fraud generates dirty money and money laundering cleans it. The two crimes are therefore inseparable in practice.

For the CAMS exam, this topic is important for several reasons:
- The FATF Recommendations require countries to criminalise money laundering on the basis of a wide range of predicate offenses, and fraud is explicitly included in the FATF list of designated categories of offenses.
- Regulators such as FinCEN have issued numerous advisories on fraud-related typologies, including business email compromise (BEC), elder financial exploitation, COVID-19 relief fraud and romance scams, all of which have appeared in exam-style scenarios.
- Financial institutions increasingly integrate fraud and AML functions (often called FRAML), because the same customers, accounts, transactions and red flags are relevant to both disciplines.
- Suspicious Activity Reports (SARs) and equivalent reports in many jurisdictions include fraud-specific categories, so compliance officers must understand fraud to report correctly.
- Money mule networks, a central feature of modern fraud, are simultaneously a fraud problem and a money laundering problem.

If you understand how fraud works, you will understand where laundered money comes from, what it looks like when it enters the financial system, and why the institution may be both a victim of fraud and a conduit for laundering at the same time.

2. What Fraud Is
Fraud is the intentional use of deception, misrepresentation or concealment to obtain money, property, services or an unfair advantage, or to cause a loss to another party. The essential elements are: (1) a deliberate false statement or omission, (2) made with intent to deceive, (3) relied upon by the victim, and (4) resulting in loss to the victim or gain to the perpetrator.

Fraud differs from money laundering in a fundamental way:
- Fraud is the crime that generates the illicit proceeds.
- Money laundering is the process that disguises the origin of those proceeds so they appear legitimate.

Fraud can be committed against individuals, businesses, governments or financial institutions. In AML terms, the financial institution may be:
- the direct victim (for example, loan fraud or check kiting against the bank),
- the channel through which a third party is defrauded (for example, a customer tricked into wiring funds to a scammer), or
- the vehicle for laundering fraud proceeds (for example, mule accounts receiving and forwarding scam payments).

Major Categories of Fraud Relevant to AML
Identity-related fraud
- Identity theft: stealing personal data to open accounts, obtain credit or take over existing accounts.
- Synthetic identity fraud: combining real and fabricated data (such as a genuine government ID number with a fake name and date of birth) to create a new, non-existent person who builds credit over time and then busts out.
- Account takeover (ATO): gaining control of a legitimate customer account through phishing, malware, SIM swapping or credential stuffing.

Payment and banking fraud
- Check fraud: forged, altered, counterfeit or stolen checks, and check kiting (exploiting float between accounts).
- Credit and debit card fraud: card-not-present fraud, skimming, counterfeit cards.
- Wire fraud and authorised push payment (APP) fraud: the victim is manipulated into sending funds themselves, making recovery difficult.
- Business email compromise (BEC): criminals impersonate executives, vendors or lawyers via spoofed or hacked email to redirect legitimate payments to accounts they control.

Investment and securities fraud
- Ponzi schemes: returns to early investors are paid from the capital of new investors rather than genuine profits; the scheme collapses when new money dries up.
- Pyramid schemes: participants earn primarily by recruiting others.
- Pump-and-dump: artificially inflating the price of a thinly traded security through false promotion, then selling.
- Affinity fraud: targeting members of a religious, ethnic or professional community by exploiting trust.
- Cryptocurrency investment scams, including so-called pig butchering, where victims are groomed over time to invest in fake trading platforms.

Consumer and social engineering fraud
- Romance scams: fabricated relationships used to extract money or to recruit the victim as a money mule.
- Advance-fee fraud (such as 419 scams): the victim pays upfront fees for a promised larger payout that never arrives.
- Lottery and prize scams, tech support scams, grandparent scams and government impersonation scams.
- Elder financial exploitation: abuse of older adults by strangers or trusted persons such as caregivers, family members or holders of power of attorney.

Institutional and government program fraud
- Mortgage and loan fraud: inflated appraisals, straw buyers, falsified income.
- Insurance fraud: staged accidents, inflated claims, fake policies.
- Healthcare fraud: billing for services not rendered, kickbacks, phantom clinics.
- Tax fraud and VAT carousel (missing trader) fraud.
- Government benefit and relief fraud, such as the misuse of pandemic relief loans and unemployment insurance.
- Procurement and invoice fraud, often linked to corruption.

3. How It Works: From Fraud to Laundering
Once a fraud succeeds, the perpetrator holds proceeds that are traceable to the victim. The laundering process follows the familiar three stages, but with features specific to fraud.

Placement
Fraud proceeds often enter the system already in electronic form, because the victim wires or transfers the money directly. This means placement may already be complete when the funds hit the first receiving account. In cash-based frauds (such as door-to-door scams or cash-collecting couriers), structuring of deposits below reporting thresholds is common.

Layering
This is where fraud and money laundering overlap most heavily. Typical techniques include:
- Routing funds through money mule accounts, often in multiple countries, with rapid onward transfers within hours.
- Converting funds to virtual assets, prepaid cards, gift cards or money orders.
- Using shell companies with generic names to receive BEC and invoice fraud payments.
- Splitting a large fraudulent transfer into many smaller transfers to different beneficiaries.
- Using trade-based methods or purchasing high-value goods for resale.

Integration
Laundered fraud proceeds are returned to the criminal as apparently legitimate funds through real estate purchases, business investments, luxury goods or payments disguised as salaries, consulting fees or loan repayments.

Money Mules: The Critical Link
Money mules are individuals who receive and transfer illicit funds on behalf of others. The CAMS exam frequently tests this concept. Mules fall into three categories:
- Unwitting mules: believe they are in a genuine job or relationship (for example, a work-from-home payment processor or a romance scam victim asked to forward money).
- Witting mules: ignore obvious warning signs and continue after being alerted.
- Complicit mules: knowingly participate for a commission, often opening multiple accounts or recruiting others.
Mule accounts typically show a sudden incoming transfer inconsistent with the customer profile, followed almost immediately by outgoing wires, cash withdrawals or crypto purchases, leaving a small residual balance as the mule's fee.

Worked Example: Business Email Compromise
1. A criminal compromises or spoofs the email of a supplier to a manufacturing company.
2. The company receives a plausible email announcing new bank account details for future invoice payments.
3. Accounts payable wires 450,000 to the new account, which belongs to a recently formed shell company at another bank.
4. Within 24 hours the receiving account transfers the funds in six tranches to accounts in three countries and converts part of the balance to cryptocurrency.
5. The receiving bank sees a newly opened business account with no operating history receiving a large wire described as an invoice payment, followed by immediate outbound transfers unrelated to the stated business purpose.
In this scenario the originating bank's customer is the fraud victim, while the receiving bank is being used for placement and layering. Both institutions have reporting obligations and both should move quickly to attempt a funds recall.

Worked Example: Ponzi Scheme
An investment adviser promises consistent returns of 1.5 percent per month regardless of market conditions. Investor deposits are pooled in one account. Rather than being invested, incoming funds are used to pay redemptions to earlier investors and to fund the adviser's lifestyle. From an AML perspective, the account shows deposits from many unrelated individuals, payments back out to some of those same individuals, transfers to the adviser's personal accounts and purchases of luxury assets, and little or no activity with actual brokerage or custodial firms. The fraud proceeds are being laundered through commingling and integration at the same time the fraud is being perpetrated.

Worked Example: Synthetic Identity Bust-Out
A criminal creates a synthetic identity, opens a small credit line, makes timely payments for 18 months to build a strong credit profile, obtains multiple credit cards and loans, then maxes out every line and disappears. The proceeds are often used to buy goods for resale or are cashed out through merchant accounts controlled by the same network. The AML red flag is a customer with a thin or inconsistent identity footprint whose credit exposure grows unusually quickly.

4. Key Red Flags Linking Fraud and Money Laundering
Account opening and identity red flags
- Identity documents that appear altered, inconsistent or belong to a different person.
- Multiple accounts opened with the same device, IP address, phone number or address.
- Customer unable to explain the purpose of the account or the source of expected funds.
- Elderly customer accompanied by a new acquaintance who dominates the conversation.

Transaction red flags
- Sudden large inbound transfer inconsistent with the customer's history or profile, followed by rapid outbound transfers or cash withdrawals (classic mule pattern).
- Payment instructions changed shortly before a large payment, especially via email only.
- Wires to beneficiaries in jurisdictions unrelated to the customer's business.
- Many small payments from unrelated individuals into one account (possible scam collection account or Ponzi scheme).
- Purchases of gift cards, prepaid cards or virtual currency immediately after receiving funds.
- Customer repeatedly sends money to someone they have never met in person, or describes an online relationship, inheritance, lottery win or urgent investment opportunity.
- Structured cash deposits across branches or days.
- Checks with mismatched fonts, missing security features, or deposited then quickly drawn against before clearing.

Behavioural red flags
- Customer appears coached, nervous, or reads from a script when making a transaction.
- Customer insists on urgency and secrecy.
- Customer is unable to explain the counterparty or the stated business purpose.
- Customer continues transacting after being warned about a possible scam.

5. The Institutional Response
- Detection: transaction monitoring rules tuned to mule behaviour, velocity and inconsistency with customer profile; device and behavioural analytics; sharing of fraud alerts with the AML team.
- Investigation: link analysis across accounts, review of KYC information, contacting the customer where appropriate without tipping off a suspected perpetrator.
- Reporting: file a SAR or equivalent report, selecting the appropriate fraud and money laundering categories and using key terms specified in regulator advisories (for example, FinCEN requests specific phrases in the narrative for BEC and elder exploitation). Reporting is required whether the institution is the victim, the channel or the laundering vehicle.
- Recovery: send a recall request to the beneficiary bank quickly; in the United States, the FBI Recovery Asset Team and the Financial Fraud Kill Chain can assist with large international wires reported within a short window.
- Information sharing: use legal gateways such as Section 314(b) of the USA PATRIOT Act or equivalent mechanisms to exchange information with other institutions about mule networks.
- Customer protection and exit decisions: educate customers, place holds where permitted, and consider account closure for complicit mules while taking care not to tip off.
- Governance: convergence of fraud and AML functions improves detection because fraud teams see the crime in real time and AML teams see the laundering trail.

6. How to Answer Exam Questions on This Topic
CAMS questions on fraud are almost always scenario-based. Expect a short description of a customer, account or transaction pattern, followed by a question about what the pattern indicates, what the red flag is, or what the compliance officer should do next. Use the following method:

Step 1: Identify the roles. Who is the fraudster, who is the victim, and what is the institution's position (victim, channel or laundering vehicle)? This determines whether the question is really about fraud detection, laundering detection or reporting.

Step 2: Identify the typology. Match the facts to a named scheme: BEC, romance scam, Ponzi scheme, synthetic identity, mule account, check kiting, elder exploitation, pump-and-dump. The exam rewards candidates who can name the pattern precisely.

Step 3: Locate the laundering stage. Ask whether the activity reflects placement, layering or integration. Rapid in-and-out transfers through a personal account almost always indicate layering through a mule.

Step 4: Choose the action that follows the AML program. The correct action is typically to investigate and file a SAR, escalate to the compliance officer, or attempt a funds recall. Wrong answers often involve confronting the customer in a way that tips them off, ignoring the activity because the institution suffered no loss, or waiting for law enforcement before reporting.

Exam Tips: Answering Questions on Fraud and Its Relationship to Money Laundering
Tip 1: Remember the core relationship. Fraud is a predicate offense; money laundering is what happens to the proceeds. If a question asks why fraud matters to an AML program, the answer centres on fraud generating proceeds that must be laundered, not on the institution's own financial loss.

Tip 2: Know the money mule pattern cold. Unexplained inbound funds followed by rapid outbound transfers or cash withdrawals, leaving a small retained balance, is the single most tested fraud-laundering pattern. If you see it, think mule account and layering.

Tip 3: Distinguish victim from perpetrator. A customer who is being scammed is a victim; the institution should protect and warn them, and still file a SAR about the scheme. A customer who knowingly forwards funds is a complicit mule and a launderer. Questions about tipping off apply to suspected perpetrators, not to warning a genuine victim about a scam.

Tip 4: Reporting does not depend on loss to the bank. A common distractor says no report is needed because the bank was not harmed or the funds were recovered. Suspicious activity must be reported regardless of whether the institution lost money.

Tip 5: Recognise Ponzi scheme indicators. Consistent above-market returns, payments to investors funded by new investor deposits, commingling in one account, little evidence of actual investment activity, and pressure to reinvest. The money laundering element is the commingling and integration of investor funds.

Tip 6: Watch for changed payment instructions. In BEC scenarios the key red flag is a last-minute change in beneficiary bank details communicated by email alone. The best first response is to verify through a known independent channel and, if a payment was already made, initiate a recall immediately and report.

Tip 7: Elder financial exploitation is a fraud-and-AML topic. Red flags include a new caregiver or friend controlling the account, sudden changes in power of attorney or beneficiaries, uncharacteristic withdrawals, and the customer appearing confused or coached. The expected response includes escalation, SAR filing and, where permitted, notifying adult protective services.

Tip 8: Synthetic identity is about non-existent people. If the facts describe a real government number paired with mismatched name or date of birth, a thin credit file that grows rapidly, or multiple identities sharing the same contact details, the answer is synthetic identity fraud, not ordinary identity theft.

Tip 9: Use the word most. CAMS questions often ask for the most likely explanation or the best next step. Several options may be plausible; choose the one most directly supported by the facts and most consistent with a risk-based AML program.

Tip 10: Favour process over heroics. Correct answers emphasise investigation, escalation, documentation, reporting and lawful information sharing. Answers that involve freezing funds without authority, contacting the suspected fraudster directly, or delaying a report pending certainty are usually wrong.

Tip 11: Link fraud to other typologies. Fraud proceeds frequently flow through virtual assets, shell companies, trade-based schemes and money services businesses. If a question combines fraud with another method, identify the fraud as the predicate and the other method as the laundering channel.

Tip 12: Know the convergence concept. Questions on program effectiveness may ask why fraud and AML teams should share data. The answer is that both disciplines examine the same customers and transactions, so integration improves detection, reduces duplication and produces more complete reports.

7. Sample Practice Questions
Question 1. A retired customer with a modest pension suddenly receives three wire transfers totalling 60,000 from unrelated individuals in two weeks, and within a day of each receipt purchases cryptocurrency and withdraws cash. When asked, she says she is helping her online fiance, whom she has never met, move money for his overseas business. Which conclusion is most appropriate?
Answer: The customer is most likely an unwitting money mule recruited through a romance scam, and the account is being used to layer fraud proceeds. The institution should investigate, protect the customer, and file a SAR.

Question 2. A newly incorporated company opens an account, receives a 300,000 wire described as an invoice payment from a foreign manufacturer, and within hours transfers the funds to four accounts abroad. The company has no website, employees or operating history. What does this pattern most likely indicate?
Answer: A shell company receiving the proceeds of business email compromise or invoice fraud and laundering them through rapid layering. The institution should attempt to recall funds, investigate and report.

Question 3. Which statement best describes the relationship between fraud and money laundering?
Answer: Fraud is a predicate offense that generates illicit proceeds, and money laundering is the process used to disguise the origin of those proceeds so they can be used without detection.

Question 4. An investment firm account receives deposits from dozens of individuals, makes periodic payments back to some of them, transfers large sums to the principal's personal account, and shows no transactions with brokerages or custodians. What is the most likely explanation?
Answer: A Ponzi scheme in which new investor funds are used to pay earlier investors and are commingled and integrated for the perpetrator's personal benefit.

8. Summary
Fraud and money laundering are two halves of the same criminal enterprise. Fraud creates the proceeds; laundering hides them. Modern fraud, particularly BEC, investment scams, identity fraud and social engineering, relies on networks of mule accounts and rapid layering through wires, prepaid instruments and virtual assets. For the CAMS exam, master the main fraud typologies, the money mule pattern, the distinction between victim and perpetrator, the key red flags, and the expected institutional response of investigation, reporting and recovery. Approach scenario questions by identifying the roles, naming the typology, locating the laundering stage and selecting the action that best follows a risk-based AML program.